Authorization Bypass

wildfly-elytron is vulnerable to authorization bypass. The vulnerability exists as the security manager has an authorization bypass flaw...

Insecure Logout

WildFly Elytron Web is vulnerable to insecure logout. The vulnerability exists because HttpServletRequest.logout does not perform a successful logout if Elytron security is used...