It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform – Continuous Delivery (EAP-CD) introducing regression. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14317
Reference (s):
- https://bugzilla.redhat.com/show_bug.cgi?id=1854251
- URL: https://bugzilla.redhat.com/show_bug.cgi?id=1854251