PT-2024-28802
CVE-2024-4029
·
Published
2024-05-02
·
Updated
2026-09-24
Description by
CVSS 3.1
4.1
MediumMetricsAV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Wildfly (affected versions not specified)
Description
A vulnerability was found in Wildfly’s management interface, where the lack of limitation of sockets for the management interface may cause a denial of service by hitting the nofile limit, as there is no possibility to configure or set a maximum number of connections.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, consider limiting access to the management interface to minimize the risk of exploitation.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾