CVE-2023-4061

A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system.

Score

CVSS 3.1 6.5 Medium

Status

Modified - secalert@redhat.com

Published

2023-11-08

Last modified

2026-09-23

Weaknesses

CWE-200

Affected products

• Jboss Enterprise Application Platform (Redhat)
• Wildfly Core (Redhat)

References

• https://access.redhat.com/errata/RHSA-2023:5484
• https://access.redhat.com/errata/RHSA-2023:5485
• https://access.redhat.com/errata/RHSA-2023:5486
• https://access.redhat.com/errata/RHSA-2023:5488
• https://access.redhat.com/security/cve/CVE-2023-4061
• https://bugzilla.redhat.com/show_bug.cgi?id=2228608