Privilege escalation in Red Hat Wildfly
CVE-2019-3805
A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.002 (7.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 8th percentile — 7.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Red Hat Wildfly — versions affects up to 16.0.0.Final
- Red Hat Jboss Enterprise Application Platform — versions 6.0.0, 7.0.0
- Red Hat Wildfly
Weakness classification (CWE)
References
- bugzilla.redhat.com/show_bug.cgi (Issue Tracking, Vendor Advisory)
- access.redhat.com/errata/RHSA-2019:1107 (vendor-advisory, Vendor Advisory)
- access.redhat.com/errata/RHSA-2019:1108 (vendor-advisory, Vendor Advisory)
- access.redhat.com/errata/RHSA-2019:1106 (vendor-advisory, Vendor Advisory)
- access.redhat.com/errata/RHSA-2019:1140 (vendor-advisory, Vendor Advisory)
- security.netapp.com/advisory/ntap-20190517-0004/ (Third Party Advisory)
- access.redhat.com/errata/RHSA-2019:2413 (vendor-advisory, Vendor Advisory)
- access.redhat.com/errata/RHSA-2020:0727 (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-3805?
- CVE-2019-3805 is a medium-severity vulnerability in Red Hat Wildfly, classified under Signal Handler Race Condition. CVSS score: 4.7/10. Published 2019-05-03.
- How severe is CVE-2019-3805?
- Medium severity. CVSS v3 base score is 4.7 out of 10.