Vulnetix
Try Vulnetix Request Demo
CVE-2018-14627 PUBLISHED CVSS 5.300000190734863 MEDIUM

The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: <transport-config confidentiality="required" trust-in-target="supported"/>

EPSS 0.23% · 45.3th percentile

Risk Scores

CVSS v3.0
5.300000190734863
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.23%
45.3th percentile

Affected Products

VendorProductVersions
[UNKNOWN]JBoss/WildFly14.0.0
redhatwildfly0

Timeline

References

Open in Interactive Console →