org.dashbuilder:dashbuilder-webapp (>=0.6.0.beta1, <=0.6.0.beta5), org.jboss.errai:errai-cdi-jboss (>=4.0.0.beta2, <=4.0.0.beta7) +24 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (2.1.0.final)

org.wildfly.core:wildfly-server MAVEN version 2.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.dashbuilder:dashbuilder-webapp =0.6.0.beta1, =4.0.0.beta2, =4.0.0.beta2, =4.0.0.beta2,...

org.wildfly.core:wildfly-core-dist-legacy (12.0.0.final), org.wildfly.core:wildfly-core-feature-pack (12.0.0.final) +19 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (12.0.0.final)

org.wildfly.core:wildfly-server MAVEN version 12.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist-legacy 12.0.0.final -...

org.dashbuilder:dashbuilder-webapp (>=2.2.0.final, <=2.10.0.final), org.infinispan.server:infinispan-server-commons (>=9.2.0.cr2, <=9.2.5.final) +34 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (3.0.10.final)

org.wildfly.core:wildfly-server MAVEN version 3.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.dashbuilder:dashbuilder-webapp =2.2.0.final, =9.2.0.cr2, =9.2.0.cr2, =9.2.0.cr2,...

org.wildfly.core:wildfly-core-feature-pack-common (22.0.1.final), org.wildfly.core:wildfly-core-galleon-pack (22.0.1.final) +89 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (22.0.1.final)

org.wildfly.core:wildfly-server MAVEN version 22.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 22.0.1.final -...

org.wildfly.core:wildfly-core-feature-pack-common (28.0.0.beta1), org.wildfly.core:wildfly-core-galleon-pack (28.0.0.beta1) +23 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (28.0.0.beta1)

org.wildfly.core:wildfly-server MAVEN version 28.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 28.0.0.beta1 -...

org.wildfly.core:wildfly-core-feature-pack-common (23.0.0.beta2), org.wildfly.core:wildfly-core-galleon-pack (23.0.0.beta2) +18 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (23.0.0.beta2)

org.wildfly.core:wildfly-server MAVEN version 23.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 23.0.0.beta2 -...

org.eximeebpms.bpm.wildfly:eximeebpms-wildfly-subsystem (1.0.0), org.wildfly.arquillian:wildfly-arquillian-protocol-jmx (>=5.1.0.beta8, <=5.1.0.beta9) +108 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (>=27.0.0.beta1, <=27.0.0.final)

org.wildfly.core:wildfly-server MAVEN version =27.0.0.beta1, =5.1.0.beta8, =5.1.0.beta8, =27.0.0.beta1, =27.0.0.beta1, =27.0.0.beta1, =27.0.0.beta1, =27.0.0.beta1, =27.0.0.beta1, =27.0.0.beta1, =27.0.0.beta1, =27.0.0.beta1, =27.0.0.beta1, =27.0.0.beta1, =27.0.0...

Duplicate Advisory: Wildfly Server Role Based Access Control (RBAC) provider has Improper Access Control

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-qr6x-62gq-4ccp. This link is maintained to preserve external references. Original Description A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the execute functions in ServerSuspendHandler.java and ServerResumeHandler.java, which do not perform sufficient checks for the authorization of the running user. This allows a user with the Monitor or Auditor...

GHSA-FCRW-MPHX-7CXF Duplicate Advisory: Wildfly Server Role Based Access Control (RBAC) provider has Improper Access Control

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-qr6x-62gq-4ccp. This link is maintained to preserve external references. Original Description A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control...

CVE-2025-23367

A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor ro...

br.eti.clairton:ds-test (>=0.4.0, <=1.2.1), com.antonyudin.wildfly.security:ay-securityrealm-ejb (1.0) +475 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (>=1.0.0.alpha16, <=27.0.0.final)

org.wildfly.core:wildfly-server MAVEN version =1.0.0.alpha16, =0.4.0, =1.0.1, =6.2.0, =0.1.0, =8.0.0.final, =0.4.0, =0.4.0, =0.4.0, =0.2, =3.10, =3.0.8, =2.0.0.final, =2.7.0.final and more Source cves: CVE-2025-23367 Source advisory: MEND:CVE-2025-23367...

org.wildfly.core:wildfly-core-feature-pack-common (28.0.0.beta1), org.wildfly.core:wildfly-core-galleon-pack (28.0.0.beta1) +23 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (28.0.0.beta1)

org.wildfly.core:wildfly-server MAVEN version 28.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 28.0.0.beta1 -...

CVE-2025-23367 Org.wildfly.core:wildfly-server: wildfly improper rbac permission

A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor ro...

CVE-2025-23367

The CVE-2025-23367 issue affects WildFly’s Server RBAC provider: Suspend and Resume handlers fail to perform authorization checks, allowing a user with Monitor/Auditor roles to suspend or resume the server. The vulnerability is tied to WildFly core/WildFly-server components and is acknowledged in...

CVE-2025-23367

A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor ro...

CVE-2025-23367 Org.wildfly.core:wildfly-server: wildfly improper rbac permission

A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor ro...

CVE-2025-23367 Org.wildfly.core:wildfly-server: wildfly improper rbac permission

A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor ro...

CVE-2025-23367

A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor ro...

CVE-2025-23367: Improper Access Control

A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor ro...