Description (CNA)
A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / wildfly-core | affected 7.1.6.CR1; affected 7.1.6.GA |
CWE
CWE-79
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934
- https://access.redhat.com/errata/RHSA-2019:1160
- https://access.redhat.com/errata/RHSA-2019:1162
- https://access.redhat.com/errata/RHSA-2019:1159
- https://access.redhat.com/errata/RHSA-2019:1161
- https://security.netapp.com/advisory/ntap-20190611-0002/
ADP enrichment
No English description supplied.
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934
- https://access.redhat.com/errata/RHSA-2019:1160
- https://access.redhat.com/errata/RHSA-2019:1162
- https://access.redhat.com/errata/RHSA-2019:1159
- https://access.redhat.com/errata/RHSA-2019:1161
- https://security.netapp.com/advisory/ntap-20190611-0002/