CVE-2018-14627: redhat wildfly

CVSS: 5.9v3.0MediumModified

AliasesRHSA-2018:3528RHSA-2018:3529

Published 04-09-2018Last modified 05-08-2024

Vulnerability summary

CVE-2018-14627 is a medium (CVSS 5.9) vulnerability in redhat wildfly. EPSS estimates a 1.11% chance of exploitation in the next 30 days, higher than 65.4% of scored vulnerabilities.

Overall risk

24/100

0100

Low · default modelHow is this calculated?

CVSS score

5.9/10

010

Medium · v3.0 (NVD)

EPSS score

1.11%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

04-09-2018
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: <transport-config confidentiality="required" trust-in-target="supported"/>

CVSS metrics

4 scores · 3 sources · 2 versions

v3.05.9v2.04.3

EPSS trend

Probability

1.11%

Chance of exploitation in the next 30 days

Percentile

65%

Versus all other CVEs

30-day change

0.00 pp

From 1.11% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.11%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-319Cleartext Transmission of Sensitive InformationThe product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Affected systems

Redhat86 products

wildfly< 14.0.0
eap7-activemq-artemis< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-cli< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-commons< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-core-client< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6

eap7-activemq-artemis-dto< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-hornetq-protocol< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-hqclient-protocol< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-jdbc-store< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-jms-client< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-jms-server< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-journal< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-native< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-ra< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-selector< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-server< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-activemq-artemis-service-extensions< 0:1.5.5.014-1.redhat_00001.1.ep7.el7 | < 0:1.5.5.014-1.redhat_00001.1.ep7.el6
eap7-elytron-web< 0:1.0.2-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.2-1.Final_redhat_00001.1.ep7.el6
eap7-glassfish-jsf< 0:2.2.13-7.SP6_redhat_00001.1.ep7.el7 | < 0:2.2.13-7.SP6_redhat_00001.1.ep7.el6
eap7-hibernate< 0:5.1.16-1.Final_redhat_00001.1.ep7.el7 | < 0:5.1.16-1.Final_redhat_00001.1.ep7.el6
eap7-hibernate-core< 0:5.1.16-1.Final_redhat_00001.1.ep7.el7 | < 0:5.1.16-1.Final_redhat_00001.1.ep7.el6
eap7-hibernate-entitymanager< 0:5.1.16-1.Final_redhat_00001.1.ep7.el7 | < 0:5.1.16-1.Final_redhat_00001.1.ep7.el6
eap7-hibernate-envers< 0:5.1.16-1.Final_redhat_00001.1.ep7.el7 | < 0:5.1.16-1.Final_redhat_00001.1.ep7.el6
eap7-hibernate-infinispan< 0:5.1.16-1.Final_redhat_00001.1.ep7.el7 | < 0:5.1.16-1.Final_redhat_00001.1.ep7.el6
eap7-hibernate-java8< 0:5.1.16-1.Final_redhat_00001.1.ep7.el7 | < 0:5.1.16-1.Final_redhat_00001.1.ep7.el6
eap7-ironjacamar< 0:1.4.11-1.Final_redhat_00001.1.ep7.el7 | < 0:1.4.11-1.Final_redhat_00001.1.ep7.el6
eap7-ironjacamar-common-api< 0:1.4.11-1.Final_redhat_00001.1.ep7.el7 | < 0:1.4.11-1.Final_redhat_00001.1.ep7.el6
eap7-ironjacamar-common-impl< 0:1.4.11-1.Final_redhat_00001.1.ep7.el7 | < 0:1.4.11-1.Final_redhat_00001.1.ep7.el6
eap7-ironjacamar-common-spi< 0:1.4.11-1.Final_redhat_00001.1.ep7.el7 | < 0:1.4.11-1.Final_redhat_00001.1.ep7.el6
eap7-ironjacamar-core-api< 0:1.4.11-1.Final_redhat_00001.1.ep7.el7 | < 0:1.4.11-1.Final_redhat_00001.1.ep7.el6
eap7-ironjacamar-core-impl< 0:1.4.11-1.Final_redhat_00001.1.ep7.el7 | < 0:1.4.11-1.Final_redhat_00001.1.ep7.el6
eap7-ironjacamar-deployers-common< 0:1.4.11-1.Final_redhat_00001.1.ep7.el7 | < 0:1.4.11-1.Final_redhat_00001.1.ep7.el6
eap7-ironjacamar-jdbc< 0:1.4.11-1.Final_redhat_00001.1.ep7.el7 | < 0:1.4.11-1.Final_redhat_00001.1.ep7.el6
eap7-ironjacamar-validator< 0:1.4.11-1.Final_redhat_00001.1.ep7.el7 | < 0:1.4.11-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-marshalling< 0:2.0.6-1.Final_redhat_00001.1.ep7.el7 | < 0:2.0.6-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-marshalling-river< 0:2.0.6-1.Final_redhat_00001.1.ep7.el7 | < 0:2.0.6-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-modules< 0:1.6.5-1.Final_redhat_00001.1.ep7.el7 | < 0:1.6.5-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-cli< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-core< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-eap6.4< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-eap6.4-to-eap7.0< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-eap6.4-to-eap7.1< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-eap7.0< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-eap7.0-to-eap7.1< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-eap7.1< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-wildfly10.0< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-wildfly10.0-to-eap7.1< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-wildfly10.1< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-wildfly10.1-to-eap7.1< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-wildfly8.2< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-wildfly8.2-to-eap7.0< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-wildfly8.2-to-eap7.1< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-wildfly9.0< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-wildfly9.0-to-eap7.0< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-server-migration-wildfly9.0-to-eap7.1< 0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.7-1.Final_redhat_00001.1.ep7.el6
eap7-jboss-vfs< 0:3.2.13-1.Final_redhat_1.1.ep7.el7 | < 0:3.2.13-1.Final_redhat_1.1.ep7.el6
eap7-jboss-xnio-base< 0:3.5.6-1.Final_redhat_00001.1.ep7.el7 | < 0:3.5.6-1.Final_redhat_00001.1.ep7.el6
eap7-jbossws-common< 0:3.1.6-1.Final_redhat_00001.1.ep7.el7 | < 0:3.1.6-1.Final_redhat_00001.1.ep7.el6
eap7-jbossws-cxf< 0:5.1.11-1.Final_redhat_00001.1.ep7.el7 | < 0:5.1.11-1.Final_redhat_00001.1.ep7.el6
eap7-log4j-jboss-logmanager< 0:1.1.6-1.Final_redhat_00001.1.ep7.el7 | < 0:1.1.6-1.Final_redhat_00001.1.ep7.el6
eap7-picketbox< 0:5.0.3-2.Final_redhat_3.1.ep7.el7 | < 0:5.0.3-2.Final_redhat_3.1.ep7.el6
eap7-picketbox-infinispan< 0:5.0.3-2.Final_redhat_3.1.ep7.el7 | < 0:5.0.3-2.Final_redhat_3.1.ep7.el6
eap7-picketlink-api< 0:2.5.5-14.SP12_redhat_2.1.ep7.el7 | < 0:2.5.5-14.SP12_redhat_2.1.ep7.el6
eap7-picketlink-bindings< 0:2.5.5-14.SP12_redhat_2.1.ep7.el7 | < 0:2.5.5-14.SP12_redhat_2.1.ep7.el6
eap7-picketlink-common< 0:2.5.5-14.SP12_redhat_2.1.ep7.el7 | < 0:2.5.5-14.SP12_redhat_2.1.ep7.el6
eap7-picketlink-config< 0:2.5.5-14.SP12_redhat_2.1.ep7.el7 | < 0:2.5.5-14.SP12_redhat_2.1.ep7.el6
eap7-picketlink-federation< 0:2.5.5-14.SP12_redhat_2.1.ep7.el7 | < 0:2.5.5-14.SP12_redhat_2.1.ep7.el6
eap7-picketlink-idm-api< 0:2.5.5-14.SP12_redhat_2.1.ep7.el7 | < 0:2.5.5-14.SP12_redhat_2.1.ep7.el6
eap7-picketlink-idm-impl< 0:2.5.5-14.SP12_redhat_2.1.ep7.el7 | < 0:2.5.5-14.SP12_redhat_2.1.ep7.el6
eap7-picketlink-idm-simple-schema< 0:2.5.5-14.SP12_redhat_2.1.ep7.el7 | < 0:2.5.5-14.SP12_redhat_2.1.ep7.el6
eap7-picketlink-impl< 0:2.5.5-14.SP12_redhat_2.1.ep7.el7 | < 0:2.5.5-14.SP12_redhat_2.1.ep7.el6
eap7-picketlink-wildfly8< 0:2.5.5-14.SP12_redhat_2.1.ep7.el7 | < 0:2.5.5-14.SP12_redhat_2.1.ep7.el6
eap7-undertow< 0:1.4.18-8.SP9_redhat_00001.1.ep7.el7 | < 0:1.4.18-8.SP9_redhat_00001.1.ep7.el6
eap7-undertow-jastow< 0:2.0.6-1.Final_redhat_00001.1.ep7.el7 | < 0:2.0.6-1.Final_redhat_00001.1.ep7.el6
eap7-undertow-server< 0:1.0.2-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.2-1.Final_redhat_00001.1.ep7.el6
eap7-wildfly< 0:7.1.5-4.GA_redhat_00002.1.ep7.el7 | < 0:7.1.5-4.GA_redhat_00002.1.ep7.el6
eap7-wildfly-client-config< 0:1.0.1-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.1-1.Final_redhat_00001.1.ep7.el6
eap7-wildfly-elytron< 0:1.1.11-1.Final_redhat_00001.1.ep7.el7 | < 0:1.1.11-1.Final_redhat_00001.1.ep7.el6
eap7-wildfly-elytron-tool< 0:1.0.8-1.Final_redhat_00001.1.ep7.el7 | < 0:1.0.8-1.Final_redhat_00001.1.ep7.el6
eap7-wildfly-javadocs< 0:7.1.5-2.GA_redhat_00002.1.ep7.el7 | < 0:7.1.5-2.GA_redhat_00002.1.ep7.el6
eap7-wildfly-modules< 0:7.1.5-4.GA_redhat_00002.1.ep7.el7 | < 0:7.1.5-4.GA_redhat_00002.1.ep7.el6
eap7-wildfly-openssl< 0:1.0.6-2.Final_redhat_2.1.ep7.el7 | < 0:1.0.6-2.Final_redhat_2.1.ep7.el6
eap7-wildfly-openssl-java< 0:1.0.6-2.Final_redhat_2.1.ep7.el7 | < 0:1.0.6-2.Final_redhat_2.1.ep7.el6
eap7-wildfly-openssl-linux< 0:1.0.6-15.Final_redhat_2.1.ep7.el7 | < 0:1.0.6-15.Final_redhat_2.1.ep7.el6
eap7-wildfly-openssl-linux-debuginfo< 0:1.0.6-15.Final_redhat_2.1.ep7.el7 | < 0:1.0.6-15.Final_redhat_2.1.ep7.el6