REDHAT-BUG-2514537: Medium severity Red Hat JBoss EAP vulnerability

A Role-Based Access Control (RBAC) bypass vulnerability was discovered in JBoss EAP within the /core-service=platform-mbean/type=runtime management resource. The flaw is caused by a custom implementation of the read-resource operation handler in the wildfly-platform-mbean component that omits necessary RBAC sensitivity checks. While the read-attribute operation correctly enforces restrictions on security-sensitive attributes, the read-resource(include-runtime) operation bypasses these checks. An authenticated attacker with a low-privilege role (such as Monitor) can exploit this to read sensitive information, including system properties (which may contain resolved secrets or credentials), JVM input arguments, and boot classpath or library path information. This information exposure can be used to facilitate further attacks by revealing environment configuration and sensitive application metadata.