CVE-2019-3834 - CVE House
Back to Database
Status published Medium CVE-2019-3834

It was found that the fix for CVE-2014-0114 had been...

Vulnerability Description

It was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 (JON). This flaw allows attackers to manipulate ClassLoader properties on a vulnerable server. Exploits that have been published rely on ClassLoader properties that are exposed such as those in JON 3. Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/site/solutions/869353. Note that while multiple products released patches for the original CVE-2014-0114 flaw, the reversion described by this CVE-2019-3834 flaw only occurred in JON 3.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-3834

Credits & Attribution

No credits recorded in the NVD database.

References

More from RedHat

View All →
CVE-2019-19341
A flaw was found in Ansible Tower, versions 3.6.x before...
Medium 5.9
CVE-2019-10212
A flaw was found in, all under 2.0.20, in the...
Medium 4.8
CVE-2019-10202
A series of deserialization vulnerabilities have been discovered in Codehaus...
High 8.1
CVE-2019-10176
A flaw was found in OpenShift Container Platform, versions 3.11...
Medium 4.2
CVE-2019-10171
It was found that the fix for CVE-2018-14648 in 389-ds-base,...
High 7.5

Affected Vendor

Affected Software

struts
Vulnerable Versions:
all versions under 1.3.10_1

Timeline

Official Publish: October 3rd, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-470

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.