REDHAT-BUG-2337621: High severity Red Hat WildFly vulnerability
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.
Network access to any of WildFly or JBoss EAP’s exposed ports which require either HTTP or SASL authentication.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2337621?
REDHAT-BUG-2337621 is classified as a moderate vulnerability due to its potential to allow brute force attacks.
How do I fix REDHAT-BUG-2337621?
To fix REDHAT-BUG-2337621, implement account lockout mechanisms and rate limiting for authentication attempts.
What products are affected by REDHAT-BUG-2337621?
REDHAT-BUG-2337621 affects Red Hat WildFly and JBoss EAP applications.
How can I mitigate risks associated with REDHAT-BUG-2337621?
Mitigating risks for REDHAT-BUG-2337621 involves using strong passwords and enabling two-factor authentication.
What types of attacks are possible due to REDHAT-BUG-2337621?
REDHAT-BUG-2337621 makes the affected products vulnerable to brute force attacks via the CLI.