CVE-2014-0169

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-02 · updated 2026-06-17
Weakness: CWE-863

Description

In JBoss EAP 6 a security domain is configured to use a cache that is shared between all applications that are in the security domain. This could allow an authenticated user in one application to access protected resources in another application without proper authorization. Although this is an intended functionality, it was not clearly documented which can mislead users into thinking that a security domain cache is isolated to a single application.

Affected products

Red Hat JBoss EAP: 6.0.0

References

https://access.redhat.com/security/cve/cve-2014-0169
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0169
https://access.redhat.com/security/cve/cve-2014-0169
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0169

Get alerted when CVE-2014-0169 or the next vulnerability affects your stack