Lucene search
+L

2 matches found

RedHat Linux
RedHat Linux
added 2019/05/08 12:12 p.m.6 views

wildfly: wrong SecurityIdentity for EE concurrency threads that are reused

It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem stores a SecurityIdentity to run the thread with that security identity. As these threads do not necessarily terminate if the 'keep alive' time has not expired, this could allow a shared thread to use the wrong securit...

8.8CVSS5.8AI score0.01509EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2019/05/08 12:9 p.m.8 views

wildfly: wrong SecurityIdentity for EE concurrency threads that are reused

It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem stores a SecurityIdentity to run the thread with that security identity. As these threads do not necessarily terminate if the 'keep alive' time has not expired, this could allow a shared thread to use the wrong securit...

8.8CVSS5.8AI score0.01509EPSS
SaveExploits0References4
Rows per page
Query Builder