CVE-2019-14887

A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption. This could lead to a leak of the data being passed over the network. Wildfly version 7.2.0.GA, 7.2.3.GA and 7.2.5.CR2 are believed to be vulnerable.

• CWE-757

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14887Issue Tracking, Vendor Advisory
• https://issues.redhat.com/browse/JBEAP-17965Permissions Required
• https://security.netapp.com/advisory/ntap-20200327-0007/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14887Issue Tracking, Vendor Advisory
• https://issues.redhat.com/browse/JBEAP-17965Permissions Required
• https://security.netapp.com/advisory/ntap-20200327-0007/Third Party Advisory

Published

Mar 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14881A vulnerability was found in moodle 3.7 before 3.7.3, where …6.1
• CVE-2019-14882A vulnerability was found in Moodle 3.7 to 3.7.3, 3.6 to 3.6…6.1
• CVE-2019-14883A vulnerability was found in Moodle 3.6 before 3.6.7 and 3.7…5.3
• CVE-2019-14884A vulnerability was found in Moodle 3.7 before 3.73, 3.6 bef…6.1
• CVE-2019-14885A flaw was found in the JBoss EAP Vault system in all versio…4.3
• CVE-2019-14886A vulnerability was found in business-central, as shipped in…6.5
• CVE-2019-14888A vulnerability was found in the Undertow HTTP server in ver…7.5
• CVE-2019-14889A flaw was found with the libssh API function ssh_scp_new() …8.8
• CVE-2019-1489An information disclosure vulnerability exists when the Wind…7.5
• CVE-2019-14890A vulnerability was found in Ansible Tower before 3.6.1 wher…8.4
• CVE-2019-14891A flaw was found in cri-o, as a result of all pod-related pr…5
• CVE-2019-14892A flaw was discovered in jackson-databind in versions before…9.8