← voltar
CVE-2018-1047

CVE-2018-1047

EPSS 0.5%CWE-20
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
24 jan 2018Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.
Produtos afetados
Red Hat, Inc. · Wildfly

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://access.redhat.com/errata/RHSA-2018:1247https://access.redhat.com/errata/RHSA-2018:1248https://access.redhat.com/errata/RHSA-2018:1249https://access.redhat.com/errata/RHSA-2018:1251https://access.redhat.com/errata/RHSA-2018:2938https://bugzilla.redhat.com/show_bug.cgi?id=1528361https://issues.jboss.org/browse/WFLY-9620