VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Nov 8, 2023· Updated Jun 17, 2026

CVE-2023-4061

CVE-2023-4061

Description

A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.wildfly.core:wildfly-controllerMaven
< 22.0.0.Final22.0.0.Final

Affected products

9
  • Red Hat/Jboss Enterprise Application Platformcpe-rescue7 versions
    cpe:/a:redhat:jboss_enterprise_application_platform:7.4+ 6 more
    • cpe:/a:redhat:jboss_enterprise_application_platform:7.4
    • cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7range: 0:1.15.20-1.Final_redhat_00001.1.el7eap
    • cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8range: 0:1.15.20-1.Final_redhat_00001.1.el8eap
    • cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9range: 0:1.15.20-1.Final_redhat_00001.1.el9eap
    • cpe:/a:redhat:jboss_enterprise_application_platform:8
    • cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*
    • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.4:*:*:*:*:*:*:*
  • Red Hat/Wildfly Core
    cpe:2.3:a:redhat:wildfly_core:*:*:*:*:*:*:*:*
    Range: <15.0.30
  • ghsa-coords
    pkg:maven/org.wildfly.core/wildfly-controller
    Range: < 22.0.0.Final

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.