WildFly vulnerable to Insecure Default Initialization of Resource

ÉLEVÉE 7.5CVE-2022-1278 · BIT-wildfly-2022-1278 · GHSA-fmq7-gh8v-mjvc · Published 13/09/2022 · updated 17/06/2026

En bref

CVE-2022-1278 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant org.wildfly.bom:wildfly, amq (redhat), jboss a-mq (redhat).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.86%, plus élevée que 58.5% des vulnérabilités.
Correctif : mettre à jour vers 27.0.0.Beta1, 27.0.0 ou plus récent.

Package	Affected versions	Patched versions
org.wildfly.bom:wildfly Maven	`< 27.0.0.Beta1`	`27.0.0.Beta1`
amq redhat	`= 2.0`	No fix yet
jboss a-mq redhat	`= 7`	No fix yet
single sign-on redhat	`= 7.0`	No fix yet
wildfly redhat	`< 27.0.0`	`27.0.0`

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.

NVD description

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.