VDB
RHSA-2020%3A2565
RHSA-2020%3A2565
PUBLISHED
CVSS 5.5 MEDIUM
A flaw was discovered in wildfly that would allow local users, who are able to execute init.d script, to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.
Risk Scores
CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat JBoss Enterprise Application Platform Continuous Delivery |
Timeline
- Jun 15, 2020 CVE Published
- Apr 28, 2026 Distribution Patch
- Apr 28, 2026 Distribution Patch
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2020:2565 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1660263 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1735645 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1735744 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1735745 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1741860 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1751227 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1780445 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1826798 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1826805 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2565.json advisory
- https://access.redhat.com/security/cve/CVE-2019-3805 advisory
- https://www.cve.org/CVERecord?id=CVE-2019-3805 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-3805 advisory
- https://access.redhat.com/security/cve/CVE-2019-9511 advisory
- https://www.cve.org/CVERecord?id=CVE-2019-9511 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-9511 advisory
- https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md advisory
- https://kb.cert.org/vuls/id/605641/ advisory
…and 27 more