CVE-2023-4503

Katalog CVE

CVSS 7.5 · High EPSS 0,72%

Kerentanan Improper Initialization pada redhat jboss enterprise application platform, redhat jboss enterprise application platform expansion pack. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.

Rincian

Terbit di NVD

6 Februari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-665: Improper Initialization

EPSS (30 hari)

0,72% peluang dieksploitasi; lebih tinggi dari 52,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2023:7637 advisory vendor
• https://access.redhat.com/errata/RHSA-2023:7638 advisory vendor
• https://access.redhat.com/errata/RHSA-2023:7639 advisory vendor
• https://access.redhat.com/errata/RHSA-2023:7641 advisory vendor
• https://access.redhat.com/security/cve/CVE-2023-4503 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2184751 issue tracking