Description (CNA)
A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a response is received in the EJB Client, as well as the server. This flaw allows an attacker to craft a denial of service attack to make the service unavailable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / wildfly | affected jboss-ejb-client versions shipped with Red Hat JBoss EAP 7 |
CWE
CWE-404
References
ADP enrichment
No English description supplied.