CVE record · 1 source
CVE-2026-111242
When MicroProfile JWT authentication is used for servlets that declare a run-as identity, the security state established for a request is not always…
- Vendor
- Apache Software Foundation
- Product
- Apache TomEE
- Weakness
- CWE-488
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
When MicroProfile JWT authentication is used for servlets that declare a run-as identity, the security state established for a request is not always…
When MicroProfile JWT authentication is used for servlets that declare a run-as identity, the security state established for a request is not always cleared from the processing thread when the request does not complete normally.…