CVE-2019-14843: Red Hat JBoss Enterprise Application Platform

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks. Versions shipped with Red Hat Jboss EAP 7 and Red Hat SSO 7 are vulnerable to this issue.

Affected products

• Red Hat JBoss Enterprise Application Platform: version 7.2.0 only
• Red Hat Single Sign-On: version 7.3 only; affected versions not specified

Published 2020-01-07. Last modified 2026-06-17.