CVE-2020-14299 Auth bypass in picketbox
Attackers can bypass authentication in JBoss EAP using arbitrary credentials when legacy security realms are configured, potentially impacting system availability.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-14299?
CVE-2020-14299 is a medium-severity authentication bypass vulnerability in Redhat Jboss Enterprise Application Platform, published on 16 Oct 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegate to a legacy PicketBox SecurityDomain, and then reloaded to admin-only mode. This flaw allows an attacker to perform a complete authentication bypass by using an arbitrary user and password. The highest threat to vulnerability is to system availability.
Weakness: CWE-287
Which versions are affected by CVE-2020-14299?
It affects 3 products.
Products include Redhat Jboss Enterprise Application Platform, Redhat Openshift Application Runtimes, Redhat Single Sign-On.
How do I fix CVE-2020-14299?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-14299 being exploited?
There is no known exploitation of CVE-2020-14299 in the wild and no public exploit code.
Other vulnerabilities in Redhat Jboss Enterprise Application Platform
- CVE-2017-12149 Red Hat JBoss Application Server Remote Code Execution
- CVE-2010-1428 Red Hat JBoss Information Disclosure
- CVE-2010-0738 Red Hat JBoss Authentication Bypass
- CVE-2016-3690 Deserialization in n/a
- CVE-2017-7504 Deserialization in JBoss
All Redhat Jboss Enterprise Application Platform vulnerabilities
Sources
Also known as GHSA-vx2g-h7fh-g3vj.