What’s Vulnerable › Vulnerabilities

CVE-2019-3805

• Severity: medium (CVSS 4.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-03 · updated 2026-06-17
• Weakness: CWE-364

Description

A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.

Affected products

• Red Hat JBoss EAP: 6.0.0, 7.0.0
• Wildfly: through 16.0.0

References

• https://access.redhat.com/errata/RHSA-2019:1106
• https://access.redhat.com/errata/RHSA-2019:1107
• https://access.redhat.com/errata/RHSA-2019:1108
• https://access.redhat.com/errata/RHSA-2019:1140
• https://access.redhat.com/errata/RHSA-2019:2413
• https://access.redhat.com/errata/RHSA-2020:0727
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3805
• https://security.netapp.com/advisory/ntap-20190517-0004/
• https://access.redhat.com/errata/RHSA-2019:1106
• https://access.redhat.com/errata/RHSA-2019:1107
• https://access.redhat.com/errata/RHSA-2019:1108
• https://access.redhat.com/errata/RHSA-2019:1140

Get alerted when CVE-2019-3805 or the next vulnerability affects your stack