CVE-2014-0018: Red Hat JBoss Enterprise Application Platform

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container (MSC) service registry, which allows local users to modify the server via a crafted deployment.

Affected products

• Red Hat JBoss Enterprise Application Platform: version 6.2.0 only
• Red Hat JBoss Wildfly Application Server: affected versions not specified

Published 2014-02-14. Last modified 2026-06-17.