Description
An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread pool that still retains the security context from the process last used, which lets a local user obtain elevated privileges.
Remediation
References
Related Vulnerabilities
WordPress Plugin EWWW Image Optimizer Cross-Site Scripting (2.0.1)
WordPress Plugin Customify-Intuitive Website Styling Cross-Site Request Forgery (2.10.4)
IBM WebSEAL Insertion of Sensitive Information into Log File Vulnerability (CVE-2017-1480)
Joomla Inadequate Encryption Strength Vulnerability (CVE-2011-3629)