CVE-2023-4061

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 8, 2023
Updated: Nov 16, 2023
CWE ID 863

Summary

CVE-2023-4061 is a vulnerability affecting Wildfly-core. This issue permits a management user to exploit the resolve-expression feature in the HAL Interface, potentially gaining unauthorized access to sensitive information within the Wildfly system. The flaw may allow malicious actors to obtain confidential data, posing a risk to the security and integrity of affected systems. The vulnerability underscores the importance of securing management interfaces and restricting access to sensitive information. Users are advised to apply relevant patches or updates to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Apache Superset

Affected Vendors

  • Apache Software Foundation