A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.
The product does not properly manage privileges while it is switching between different contexts that have different privileges or spheres of control.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wildfly | Redhat | * | * |