CVE-2020-1732

A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request...

CVE-2020-1732

CVE-2020-1732 refers to a flaw in Soteria prior to 1.0.1 where concurrent requests using EE Security with WildFly Elytron can cause security identity corruption across threads, potentially allowing an identity from one request to be used in another. Affected: Soteria (security identity handling) ...

Red Hat WildFly Elytron License Issue Vulnerability

Red Hat WildFly Elytron is a security framework for application servers from Red Hat USA. The product supports features such as configuring administrative access to servers. An authorization issue vulnerability exists in Red Hat WildFly Elytron 1.11.3.Final and prior versions. The vulnerability...

CVE-2020-10714

A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

Authorization Bypass

wildfly-elytron is vulnerable to authorization bypass. The vulnerability exists as the security manager has an authorization bypass flaw...

Insecure Logout

WildFly Elytron Web is vulnerable to insecure logout. The vulnerability exists because HttpServletRequest.logout does not perform a successful logout if Elytron security is used...