High severity7.5OSV Advisory· Published Sep 13, 2022· Updated Jun 17, 2026
CVE-2022-1278
CVE-2022-1278
Description
A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.wildfly.bom:wildflyMaven | < 27.0.0.Beta1 | 27.0.0.Beta1 |
Affected products
11- ghsa-coords2 versions
< 27.0.0.Beta1+ 1 more
- (no CPE)range: < 27.0.0.Beta1
- (no CPE)range: < 27.0.0
- cpe:2.3:a:redhat:amq_online:-:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:integration_camel_k:-:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:integration_service_registry:-:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_a-mq:7:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform_expansion_pack:-:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor AdvisoryWEB
- github.com/advisories/GHSA-fmq7-gh8v-mjvcghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-1278ghsaADVISORY
- issues.redhat.com/browse/WFLY-16238ghsaWEB
News mentions
0No linked articles in our index yet.