CVE-2018-1047

A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

Score

CVSS 3.0 5.5 Medium

Status

Modified - secalert@redhat.com

Published

2018-01-24

Last modified

2024-08-05

Weaknesses

CWE-20, CWE-22

Affected products

• Wildfly (Red Hat Inc.)
• Jboss Enterprise Application Platform (Redhat)
• Jboss Wildfly Application Server (Redhat)

References

• https://access.redhat.com/errata/RHSA-2018:1247
• https://access.redhat.com/errata/RHSA-2018:1248
• https://access.redhat.com/errata/RHSA-2018:1249
• https://access.redhat.com/errata/RHSA-2018:1251
• https://access.redhat.com/errata/RHSA-2018:2938
• https://bugzilla.redhat.com/show_bug.cgi?id=1528361
• https://issues.jboss.org/browse/WFLY-9620