VULNERABILITY INTELLIGENCE

CVE-2018-14627

CVSS score5.3 MEDIUM
EPSS probability1.11%
CISA KEVNot currently listed
Published2018-09-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: <transport-config confidentiality="required" trust-in-target="supported"/>

Weakness classification

  • CWE-319: Cleartext Transmission of Sensitive Information

Primary references