REDHAT-BUG-1976052: Low severity WildFly wildfly-core vulnerability
A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1976052?
The severity of REDHAT-BUG-1976052 is high due to the potential unauthorized access to sensitive information.
How do I fix REDHAT-BUG-1976052?
To fix REDHAT-BUG-1976052, promptly update your WildFly wildfly-core installation to the latest patched version provided by the vendor.
What versions are affected by REDHAT-BUG-1976052?
All versions of WildFly wildfly-core are affected by REDHAT-BUG-1976052.
What is the impact of REDHAT-BUG-1976052?
The impact of REDHAT-BUG-1976052 includes potential unauthorized access to vault expressions by users granted access to the management interface.
Is there a workaround for REDHAT-BUG-1976052?
There is no known workaround for REDHAT-BUG-1976052; updating to the latest version is the recommended action.