CVE-2020-1719

Se ha encontrado un fallo en wildfly. El principio EJBContext no se devuelve después de invocar otro EJB usando un dominio de seguridad diferente. La mayor amenaza de esta vulnerabilidad es para la confidencialidad e integridad de los datos. Las versiones anteriores a wildfly 20.0.0.Final están afectadas

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity.

Red Hat Single Sign-On 7.3 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.3.8 serves as a replacement for Red Hat Single Sign-On 7.3.7, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Issues addressed include bypass, cross site scripting, information leakage, and remote SQL injection vulnerabilities.