CVE-2019-14887

🗓️ 16 Mar 2020 14:48:09Reported by redhatType

Flaw in OpenSSL security provider in Wildfly allows for TLS connection downgrad

Reporter	Title	Published	Views	Family All 50
BDU FSTEC	The vulnerability of the Wildfly application server, related to insufficient handling of exceptional states, allows attackers to compromise the confidentiality and integrity of the protected information.	24 Dec 202000:00	–	bdu_fstec
CNVD	Red Hat Wildfly Encryption Problem Vulnerability	19 Mar 202000:00	–	cnvd
CVE	CVE-2019-14887	16 Mar 202014:48	–	cve
EUVD	EUVD-2019-5996	7 Oct 202500:30	–	euvd
NVD	CVE-2019-14887	16 Mar 202015:15	–	nvd
OSV	CVE-2019-14887	16 Mar 202015:15	–	osv
OSV	RHSA-2020:0804 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 6 security update	27 Sep 202415:10	–	osv
OSV	RHSA-2020:0805 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 7 security update	27 Sep 202415:10	–	osv
OSV	RHSA-2020:0806 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 8 security update	27 Sep 202415:10	–	osv
OSV	RHSA-2020:0962 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3 security update	16 Sep 202403:20	–	osv

[
  {
    "product": "wildfly",
    "vendor": "Red Hat",
    "versions": [
      {
        "status": "affected",
        "version": "7.2.0.GA, 7.2.3.GA, 7.2.5.CR2"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20200327-0007/
issues	www.issues.redhat.com/browse/JBEAP-17965
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

27 Mar 2020 08:06Current

8.8High risk

Vulners AI Score8.8

CVSS 37.4

EPSS0.01068

CWE-757