Information Disclosure

org.wildfly.core: wildfly-controller is vulnerable to Information Disclosure. The vulnerability is caused by a missing authorization check in the resolve-expression HAL interface while reading a system property or environment variables. This can lead to a malicious user accessing the Wildfly syst...

org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha1), org.wildfly.core:wildfly-domain-management (1.0.0.alpha1) +9 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha1)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-domain-http-interface 1.0.0.alpha1 -...

org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha2), org.wildfly.core:wildfly-domain-management (1.0.0.alpha2) +9 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha2)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-domain-http-interface 1.0.0.alpha2 -...

org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha3), org.wildfly.core:wildfly-domain-management (1.0.0.alpha3) +9 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha3)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-domain-http-interface 1.0.0.alpha3 -...

org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha4), org.wildfly.core:wildfly-domain-management (1.0.0.alpha4) +10 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha4)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-domain-http-interface 1.0.0.alpha4 -...

org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha5), org.wildfly.core:wildfly-domain-management (1.0.0.alpha5) +9 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha5)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-domain-http-interface 1.0.0.alpha5 -...

org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha6), org.wildfly.core:wildfly-domain-management (1.0.0.alpha6) +9 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha6)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-domain-http-interface 1.0.0.alpha6 -...

org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha8), org.wildfly.core:wildfly-domain-management (1.0.0.alpha8) +12 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha8)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha8 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-domain-http-interface 1.0.0.alpha8 -...

org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha9), org.wildfly.core:wildfly-domain-management (1.0.0.alpha9) +9 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha9)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha9 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-domain-http-interface 1.0.0.alpha9 -...

org.keycloak:keycloak-wildfly-extensions (>=1.2.0.beta1, <=1.2.0.final), org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha12) +10 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha12)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha12 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.keycloak:keycloak-wildfly-extensions =1.2.0.beta1, =1.2.0.final -...

org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha13), org.wildfly.core:wildfly-domain-management (1.0.0.alpha13) +9 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha13)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha13 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-domain-http-interface 1.0.0.alpha13 -...

org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha14), org.wildfly.core:wildfly-domain-management (1.0.0.alpha14) +9 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha14)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha14 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-domain-http-interface 1.0.0.alpha14 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.alpha16), org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha16) +17 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha16)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha16 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.alpha16 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.alpha17), org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha17) +17 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha17)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha17 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.alpha17 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.alpha18), org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha18) +18 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha18)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha18 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.alpha18 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.alpha19), org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha19) +17 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha19)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha19 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.alpha19 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta1), org.wildfly.core:wildfly-domain-http-interface (1.0.0.beta1) +18 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.beta1)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta1 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta2), org.wildfly.core:wildfly-domain-http-interface (1.0.0.beta2) +44 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.beta2)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta2 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta3), org.wildfly.core:wildfly-domain-http-interface (1.0.0.beta3) +18 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.beta3)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta3 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta4), org.wildfly.core:wildfly-domain-http-interface (1.0.0.beta4) +19 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.beta4)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta4 -...