Description
A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks. Versions shipped with Red Hat Jboss EAP 7 and Red Hat SSO 7 are vulnerable to this issue.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Editor SQL Injection (1.2.6.3)
Jenkins Insufficient Verification of Data Authenticity Vulnerability (CVE-2015-7539)
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (4.0.2)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7849)
WordPress Plugin CloudFlare Multiple Cross-Site Scripting Vulnerabilities (1.3.20)