Description (CNA)
A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Soteria | affected before 1.0.1 |
CWE
CWE-284
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1732
- https://github.com/wildfly-security/soteria/commit/c2479f8c39d7d661341fdcaff7f5e97c5eea1a54
ADP enrichment
No English description supplied.