GitHub Advisoryadvisory · Maven

GHSA-fmq7-gh8v-mjvc WildFly vulnerable to Insecure Default Initialization of Resource

HIGH Published 2022-09-14 Modified 2022-09-16 Official page ↗

Aliases: CVE-2022-1278
Ecosystem: Maven
Packages: org.wildfly.bom:wildfly
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-1188
Reviewed: 2022-09-15

Affected packages

• Maven org.wildfly.bom:wildfly: < 27.0.0.Beta1 → fixed in 27.0.0.Beta1

Description

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.

Related

Alias · CVE (1)

CVE-2022-1278 A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain. vulnerability

Weakness · CWE (1)

CWE-1188 Initialization of a Resource with an Insecure Default weakness

References