EUVD-2020-12577

Malware in sbrugna...

Soteria: security identity corruption across concurrent threads

A flaw was found in WildFly where multiple requests occurring concurrently could be handled using the identity of another request. This vulnerability occurs when using EE Security with WildFly Elytron. The largest threat from this vulnerability is data confidentiality and integrity...