6.8
Medium
CVE-2023-4503 An improper initialization vulnerability was found in Galleon
Description
An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EAP 7.4.14 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | Versions not published |
References
- RHSA-2023:7637 access.redhat.com
- RHSA-2023:7638 access.redhat.com
- RHSA-2023:7639 access.redhat.com
- RHSA-2023:7641 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2184751 bugzilla.redhat.com
Timeline
- Published
- Last modified