CVE-2026-108361

The Privasys Remote Attestation TLS Clients (specifically Privasys/ra-tls-clients ) is vulnerable to a Time-of-Check Time-of-Use (TOCTOU) race condition in versions before 0.9.1 . An attacker with local access can modify workload code, data, and configuration at runtime after a successful connect...

CVE-2026-108361 Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks

Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Before 0.9.1, an attacker with local access could modify workload code, data, and configuration at any time after successful connection establishment. Once Evidence was successfully...

PT-2026-110894

Name of the Vulnerable Software and Affected Versions Privasys Remote Attestation TLS Clients versions prior to 0.9.1 Description An attacker with local access can modify workload code, data, and configuration after a TLS connection is established. This occurs because the software performs...

CVE-2019-14838

A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server...

PT-2019-13854

Name of the Vulnerable Software and Affected Versions Wildfly-core versions prior to 7.2.5.GA Description A flaw was found that allows Management users with Monitor, Auditor, and Deployer Roles to modify the runtime state of the server, which they should not be allowed to do. Recommendations For...

CVE-2019-14838: Improper Access Control

A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server...