Description
A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security interceptor accepts ITTPrincipalName identity assertions in the service context without verifying transport-level authentication, allowing a pre-auth attacker on the port 3528 to impersonate any principal on every IIOP-exposed @Remote EJB.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat Fuse 7
Default version status: unknown
Red Hat Red Hat JBoss Enterprise Application Platform 7
Default version status: unknown
Red Hat Red Hat JBoss Enterprise Application Platform 7
Default version status: unknown
Red Hat Red Hat JBoss Enterprise Application Platform 8
Default version status: affected
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack
Default version status: unaffected
Red Hat Red Hat Single Sign-On 7
Default version status: unknown