CVE-2014-8122: Race Condition
First published: Mon Dec 01 2014(Updated: )
It was discovered that under specific conditions the conversation state information stored in a thread local variable was not cleaned correctly when the conversation ends. This could lead to a race condition which when met could potentially expose sensitive information that was visible to the previous conversation to the current one.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Jboss Weld | <=2.2.7 | |
| Redhat Jboss Weld | =3.0.0-alpha1 | |
| Redhat Jboss Weld | =3.0.0-alpha2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://issues.jboss.org/browse/WELD-1802
- https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65
- https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086
- https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745
- https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml
- https://rhn.redhat.com/errata/RHSA-2015-0215.html
- https://rhn.redhat.com/errata/RHSA-2015-0217.html
- https://rhn.redhat.com/errata/RHSA-2015-0216.html
- https://rhn.redhat.com/errata/RHSA-2015-0218.html
- https://rhn.redhat.com/errata/RHSA-2015-0675.html
- https://rhn.redhat.com/errata/RHSA-2015-0773.html
- https://rhn.redhat.com/errata/RHSA-2015-0851.html
- https://rhn.redhat.com/errata/RHSA-2015-0850.html
- https://rhn.redhat.com/errata/RHSA-2015-0920.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1169237
- http://rhn.redhat.com/errata/RHSA-2015-0215.html
- http://rhn.redhat.com/errata/RHSA-2015-0216.html
- http://rhn.redhat.com/errata/RHSA-2015-0217.html
- http://rhn.redhat.com/errata/RHSA-2015-0218.html
- http://rhn.redhat.com/errata/RHSA-2015-0675.html
- http://rhn.redhat.com/errata/RHSA-2015-0773.html
- http://rhn.redhat.com/errata/RHSA-2015-0850.html
- http://rhn.redhat.com/errata/RHSA-2015-0851.html
- http://rhn.redhat.com/errata/RHSA-2015-0920.html
- http://www.securityfocus.com/bid/74252
- http://www.securitytracker.com/id/1031741
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100892
- collector/redhat-bugzilla
- alias/CVE-2014-8122
- collector/nvd-index
- agent/author
- agent/type
- agent/event
- agent/first-publish-date
- agent/severity
- agent/tags
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- package-manager/redhat
- vendor/redhat
- canonical/redhat jboss weld
- version/redhat jboss weld/2.2.7
- version/redhat jboss weld/3.0.0-alpha1
- version/redhat jboss weld/3.0.0-alpha2