CVE-2018-10683
An issue was discovered in WildFly 10.1.2.Final. In the case of a default installation without a security realm reference, an attacker can successfully access the server without authentication. NOTE: the Security Realms documentation in the product's Admin Guide indicates that "without a security realm reference" implies "effectively unsecured." The vendor explicitly supports these unsecured configurations because they have valid use cases during development
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2018-05-09
- Last modified
- 2024-08-05
- Weaknesses
- CWE-287
Affected products
References
- https://github.com/kmkz/exploit/blob/master/CVE-2018-10682-CVE-2018-10683.txt
