CVE-2023-4061

MEDIUM6.5Info disclosure

Description

A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Affected products

redhat / jboss_enterprise_application_platform
redhat / jboss_enterprise_application_platform7.4 – 7.4
redhat / wildfly_core15.0.30

References

VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2023:5484
VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2023:5485
VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2023:5486
VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2023:5488
VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2023-4061
MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2228608

Updated 29m ago · 8 sources