CVE-2022-0853

moderate-risk

Published 2022-03-11

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.

Do I need to act?

1.3% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Affected Products (5)

Descision Manager

Jboss Enterprise Application Platform

Jboss Enterprise Application Platform Expansion Pack

Process Automation

Single Sign-On

Affected Vendors

Redhat

References (4)

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2060725

Exploit https://github.com/ByteHackr/CVE-2022-0853

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2060725

Exploit https://github.com/ByteHackr/CVE-2022-0853

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 4/34 · Minimal

Exposure 12/34 · Low