CVE-2023-4061

wildfly-core Exposure of Sensitive Information to an Unauthorized Actor vulnerability in maven/org.wildfly.core/wildfly-controller

Identifiers

GHSA-26qx-4m49-6cfr, CVE-2023-4061

Package Slug

maven/org.wildfly.core/wildfly-controller

Vulnerability

wildfly-core Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Description

A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system.

Affected Versions

All versions before 22.0.0.final

Solution

Upgrade to version 22.0.0.Final or above.

Last Modified

2023-11-09

source