CVE-2020-14297

Description

A flaw was discovered in Wildflys EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.384

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-14297 are fixed in JBoss-jboss-ejb-client 4.0.34	Windows
Vulnerabilities CVE-2020-14297 are fixed in JBoss-jboss-ejb-client for Linux 4.0.34	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234