CVE-2014-8122: redhat jboss_weld Race Condition

Vulnerability summary

CVE-2014-8122 is a medium (CVSS 4.3) Race Condition vulnerability in redhat jboss_weld. EPSS estimates a 2.05% chance of exploitation in the next 30 days, higher than 80.9% of scored vulnerabilities.

Timeline

1. 13-02-2015
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.

• CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.