Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat WildFly ausnutzen, um Informationen offenzulegen.
Product
Der WildFly Application Server ist ein Anwendungsserver nach dem Jakarta-EE-Standard.
Vulnerabilities 1
-
High 7.1
Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role
A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal vulnerability in the `take-snapshot` operation. By manipulating the `name` parameter, this user can w…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2026-10-15
https://github.com/advisories/GHSA-5V76-4C24-RJMJ
-
RedHat Customer Portal vom 2026-10-15
https://access.redhat.com/security/cve/CVE-2026-84823
-
RedHat Bugzilla vom 2026-10-15
https://bugzilla.redhat.com/show_bug.cgi?id=2527902
-
EU Vulnerability Database vom 2026-10-15
https://euvd.enisa.europa.eu/enisa/EUVD-2026-102546