A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks. Versions shipped with Red Hat Jboss EAP 7 and Red Hat SSO 7 are vulnerable to this issue.
This weakness has been deprecated because it covered redundant concepts already described in CWE-287.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Single_sign-on | Redhat | 7.3 (including) | 7.3 (including) |
| Red Hat JBoss EAP 7.2 | RedHat | wildfly | * |
| Red Hat JBoss EAP 7.2 | RedHat | wildfly | * |
| Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | RedHat | eap7-wildfly-0:7.1.7-2.GA_redhat_00002.1.ep7.el7 | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6 | RedHat | eap7-yasson-0:1.0.5-1.redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7 | RedHat | eap7-yasson-0:1.0.5-1.redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-wildfly-elytron-0:1.6.4-3.Final_redhat_00002.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-apache-cxf-0:3.2.10-1.redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-byte-buddy-0:1.9.11-1.redhat_00002.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-glassfish-jsf-0:2.3.5-5.SP3_redhat_00003.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-hal-console-0:3.0.17-2.Final_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-hibernate-0:5.3.13-1.Final_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-ironjacamar-0:1.4.18-1.Final_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-jboss-genericjms-0:2.0.2-1.Final_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-jboss-msc-0:1.4.11-1.Final_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-jboss-remoting-0:5.0.16-2.Final_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-jboss-server-migration-0:1.3.1-6.Final_redhat_00006.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-jboss-xnio-base-0:3.7.6-2.SP1_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-picketbox-0:5.0.3-6.Final_redhat_00005.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00009.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00009.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-resteasy-0:3.6.1-7.SP7_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-undertow-0:2.0.26-2.SP3_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-wildfly-0:7.2.5-4.GA_redhat_00002.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-wildfly-elytron-0:1.6.5-1.Final_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-wildfly-elytron-tool-0:1.4.4-1.Final_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-wildfly-http-client-0:1.0.17-1.Final_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-wildfly-openssl-0:1.0.8-1.Final_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-wildfly-openssl-linux-x86_64-0:1.0.8-5.Final_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8 | RedHat | eap7-yasson-0:1.0.5-1.redhat_00001.1.el8eap | * |
| Red Hat Single Sign-On 7.3 | RedHat | wildfly | * |
| Red Hat Single Sign-On 7.3 for RHEL 6 | RedHat | rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el6sso | * |
| Red Hat Single Sign-On 7.3 for RHEL 7 | RedHat | rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el7sso | * |
| Red Hat Single Sign-On 7.3 for RHEL 8 | RedHat | rh-sso7-keycloak-0:4.8.15-1.Final_redhat_00001.1.el8sso | * |