CVE-2018-10934

5.4MEDIUM

Key Information:

Vendor
Red Hat
Status
Wildfly-core
Vendor
CVE Published:
27 March 2019

Summary

A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.

Affected Version(s)

wildfly-core 7.1.6.CR1

wildfly-core 7.1.6.GA

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934
x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:1160
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1162
vendor-advisoryx_refsource_REDHAT

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.