Yüksek CVSS 8.1 PoC var
CVE-2025-23368: Wildfly Core: güvenlik açığı
Açıklama (NVD)
A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.
Özet bilgiler
- Ürün
- Redhat Wildfly Core
- CVSS v3.1
- 8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,89 (yüzdelik 59)
- CWE
- CWE-307
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-wildfly-core | — | — | 31.0.3 |
| redhat-data-grid | 8.0 | 8.0 | — |
| redhat-jboss-enterprise-application-platform | 7.0.0 | 7.0.0 | — |
| redhat-jboss-enterprise-application-platform | 8.0.0 | 8.0.0 | — |