[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f87umZfZHuHYCIBV54e3nWCC65JI-R8XX14Uk3eESBqY":3,"g5a-risk:CVE-2019-3894":145},{"success":4,"data":5,"meta":143},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":26,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":62,"references":63,"referencesCount":87,"weaknesses":88,"weaknessesCount":97,"isActivelyExploited":98,"cisaInfo":26,"otxData":26,"relatedBlogPosts":99,"seoMetadata":100,"configurations":125,"relatedVendorCves":141,"notableEvents":142},"CVE-2019-3894","What is CVE-2019-3894?","It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as. These threads do not necessarily terminate if the keep alive time has not expired. This could allow a shared thread to use the wrong security identity when executing.","It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as. Thes...","2019-05-03T20:29:01.327","2020-10-15T19:50:03.567",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":39,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":38},"secalert@redhat.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":37,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",5.4,"MEDIUM",2.5,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":37,"ExploitabilityScore":47,"ImpactScore":48,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":22,"Authentication":44,"ConfidentialityImpact":45,"IntegrityImpact":45,"AvailabilityImpact":45,"BaseScore":46,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,8,6.4,0.01481,[49,49,49,49,49,49,49],"High",[53,58],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"redhat","wildfly","*","cpe:2.3:a:redhat:wildfly:*:*:*:*:*:*:*:*",{"vendor":54,"product":59,"version":60,"criteria":61,"vulnerable":4},"jboss_enterprise_application_platform","7.0.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",2,[64,69,72,75,78,83],{"url":65,"source":66,"tags":67},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:1106","Red Hat",[68],"Third Party Advisory",{"url":70,"source":66,"tags":71},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:1107",[68],{"url":73,"source":66,"tags":74},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:1108",[68],{"url":76,"source":66,"tags":77},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:1140",[68],{"url":79,"source":66,"tags":80},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2019-3894",[81,82],"Issue Tracking","Vendor Advisory",{"url":84,"source":85,"tags":86},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20190517-0004\u002F","Netapp",[68],6,[89],{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":96},"CWE-358","Improperly Implemented Security Check for Standard","The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.","","Draft","Base","Simple",1,false,[],{"title":101,"metaDescription":102,"keywords":103,"canonicalUrl":104,"structuredData":105},"What is CVE-2019-3894? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-3894, a high severity cyber security vulnerability from 2019. It was discovered that the ElytronManagedThread in Wildfly's...","CVE-2019-3894, CVE-2019-3894 vulnerability, CVE-2019-3894 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, redhat security, wildfly vulnerability, jboss_enterprise_application_platform vulnerability","\u002Fwhat-is\u002Fcve-2019-3894",{"@context":106,"@type":107,"headline":101,"description":102,"datePublished":10,"dateModified":11,"author":108,"publisher":112,"about":116,"mainEntityOfPage":120,"articleSection":123,"keywords":124},"https:\u002F\u002Fschema.org","TechArticle",{"@type":109,"name":110,"url":111},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":109,"name":110,"url":111,"logo":113},{"@type":114,"url":115},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":117,"name":6,"description":118,"additionalType":119},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":121,"@id":122},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-3894","Cybersecurity","CVE-2019-3894, CVE-2019-3894 vulnerability, CVE-2019-3894 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[126,135],{"Operator":26,"Negate":26,"Nodes":127},[128],{"Operator":129,"Negate":26,"CPEMatch":130},"OR",[131],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":133,"VersionEndExcluding":26,"VersionEndIncluding":134},"F828CF0C-8DD4-451B-B73A-B119EB5A70DB","11.0.0","16.0.0",{"Operator":26,"Negate":26,"Nodes":136},[137],{"Operator":129,"Negate":26,"CPEMatch":138},[139],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":140,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"72A54BDA-311C-413B-8E4D-388AD65A170A",[],[],{"lastModified":11,"cacheTime":144,"version":42},1792249633341,{"score":146,"band":147,"action":148,"scoredAt":149},47,"Medium","Plan remediation","2026-10-16T06:46:04.655022+00:00"]