Kunjan Rathod

A flaw was found in Wildfly, where an incorrect JBOSS LOCAL USER challenge location when using the elytron configuration may lead to JBOSS LOCAL USER access to all users on the machine. The highest threat from this issue is to confidentiality, integrity, and availability.

Name of the Vulnerable Software and Affected Versions: Artemis in EAP 7 (affected versions not specified) Description: A flaw in the HornetQ component of Artemis in EAP 7 allows a remote attacker to execute arbitrary code with the permissions of the application using a JMS ObjectMessage. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A security issue has reappeared in JBoss Enterprise Application Platform - Continuous Delivery (EAP-CD) due to regression, allowing an attacker to exploit it by modifying the PID file in /var/run/jboss-eap/. This modification enables the init.d script to terminate any process as root.

Name of the Vulnerable Software and Affected Versions: Wildfly (affected versions not specified) Description: A flaw was found in the JBoss EJB client, which has publicly accessible privileged actions. This may lead to information disclosure on the server it is deployed on, with the highest threat being to data confidentiality. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A flaw in JBossWeb allows for a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame, affecting system availability.

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009. This issue allows a remote, unauthenticated attacker to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution. The vulnerability is related to insufficient access control in the AJP Connector service.

A flaw was found when an OpenSSL security provider is used with Wildfly, where the 'enabled-protocols' value in the Wildfly configuration isn't honored. This could allow an attacker to target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption and leading to a leak of the data being passed over the network.