org.wildfly.core:wildfly-core-feature-pack-common (>=22.0.0.beta1, <=22.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (>=22.0.0.beta1, <=22.0.0.beta3) +114 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (>=22.0.0.beta1, <=22.0.0.beta3)

org.wildfly.core:wildfly-controller MAVEN version =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1,...

org.wildfly.core:wildfly-core-feature-pack-common (>=22.0.0.beta1, <=22.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (>=22.0.0.beta1, <=22.0.0.beta3) +114 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (>=22.0.0.beta1, <=22.0.0.beta3)

org.wildfly.core:wildfly-controller MAVEN version =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1,...

org.wildfly.core:wildfly-cli (2.0.0.beta7), org.wildfly.core:wildfly-core-dist (2.0.0.beta7) +29 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (2.0.0.beta7)

org.wildfly.core:wildfly-controller MAVEN version 2.0.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.beta7 - org.wildfly.core:wildfly-core-dist...

org.wildfly.core:wildfly-cli (2.0.0.cr3), org.wildfly.core:wildfly-controller (2.0.0.cr3) +33 more potentially affected by CVE-2020-35510 via org.jboss.remoting:jboss-remoting (4.0.11.final)

org.jboss.remoting:jboss-remoting MAVEN version 4.0.11.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.remoting:jboss-remoting and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.cr3 - org.wildfly.core:wildfly-controller 2.0.0.cr3...

org.wildfly.core:wildfly-cli (>=2.0.4.final, <=2.0.5.cr1), org.wildfly.core:wildfly-controller (>=2.0.4.final, <=2.0.5.cr1) +33 more potentially affected by CVE-2020-35510 via org.jboss.remoting:jboss-remoting (4.0.15.final)

org.jboss.remoting:jboss-remoting MAVEN version 4.0.15.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.remoting:jboss-remoting and may be impacted: - org.wildfly.core:wildfly-cli =2.0.4.final, =2.0.4.final, =2.0.4.final, =2.0.4.final,...

org.wildfly.core:wildfly-cli (2.0.8.final), org.wildfly.core:wildfly-controller (2.0.8.final) +33 more potentially affected by CVE-2020-35510 via org.jboss.remoting:jboss-remoting (4.0.19.final)

org.jboss.remoting:jboss-remoting MAVEN version 4.0.19.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.remoting:jboss-remoting and may be impacted: - org.wildfly.core:wildfly-cli 2.0.8.final - org.wildfly.core:wildfly-controller...

Authorization Bypass

wildfly-controller is vulnerable to authorization bypass. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possib...