CVE-2014-8122

Published: Feb 13, 2015Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.

Affected (3)

Products: Redhat: Jboss Weld

Redhat

1 product

Jboss Weld

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Weld	Up to 2.2.7
Redhat Jboss Weld	Version 3.0.0 alpha1
Redhat Jboss Weld	Version 3.0.0 alpha2

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (32)

http://rhn.redhat.com/errata/RHSA-2015-0215.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2015-0216.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2015-0217.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2015-0218.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2015-0675.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0773.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0850.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0851.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0920.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/74252

Source: secalert@redhat.com

http://www.securitytracker.com/id/1031741

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/100892

Source: secalert@redhat.com

https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml

Source: secalert@redhat.com

https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745

Source: secalert@redhat.com

https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086

Source: secalert@redhat.com

https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0215.html