CVE-2020-14297

2020-07-2415:37:25

CWE-400

redhat

www.cve.org

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

29.8%

JSON

A flaw was discovered in Wildfly’s EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable.

CNA Affected

[
  {
    "product": "wildfly",
    "vendor": "Red Hat",
    "versions": [
      {
        "status": "affected",
        "version": "jboss-ejb-client as shipped with Red Hat JBoss EAP 7"
      }
    ]
  }
]