A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.
{
"cpes": [
"cpe:2.3:a:redhat:wildfly:*:*:*:*:*:*:*:*"
],
"severity": "Medium"
}