Security Advisory
CVE-2020-14307
6.5
MEDIUM
Vulnerability Description
A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a response is received in the EJB Client, as well as the server. This flaw allows an attacker to craft a denial of service attack to make the service unavailable.
Published Date
July 24, 2020
Official Source
NIST NVD Advisory