Public vulnerability disclosure
CVE-2024-4029
Wildfly: no timeout for eap management interface may lead to denial of service (dos)
publishedCWE-770
A vulnerability was found in Wildfly’s management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.
Technical severity4.1 mediumCVSS 3.1 · CNA: redhat
Published2024-05-02Source updated 2026-11-07
Collected2026-11-074 attributed sources
Fixes and workarounds
Workaround
Currently there is no available mitigation for this vulnerability. Please make sure to perform updates as they become available.
Source: CNA: redhatAffected products and versions
| Product | Versions | Authority |
|---|---|---|
wildfly
https://github.com/wildfly/wildfly |
≥ 0; < 24.0.1.Final (affected, semver) ≥ 25.0.0.Final; < * (unaffected, semver) |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform Red Hat org.wildfly.core/wildfly-domain-http-interface
https://access.redhat.com/downloads/content/package-browser/ |
≥ 15.0.39.Final-redhat-00001; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat eap7-hal-console
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.3.24-1.Final_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat eap7-hibernate-validator
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:6.0.23-2.SP1_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat eap7-insights-java-client
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.1.3-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat eap7-ironjacamar
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.5.18-1.Final_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat eap7-jboss-cert-helper
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.1.3-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat eap7-jboss-ejb-client
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:4.0.55-1.Final_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat eap7-jboss-server-migration
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.10.0-39.Final_redhat_00039.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat eap7-jbossws-cxf
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:5.4.12-1.Final_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat eap7-jsoup
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.15.4-1.redhat_00003.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat eap7-undertow-jastow
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.0.15-1.Final_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat eap7-wildfly
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:7.4.19-1.GA_redhat_00002.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Red Hat eap7-xalan-j2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.7.1-37.redhat_00015.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat eap7-hal-console
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.3.24-1.Final_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat eap7-hibernate-validator
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:6.0.23-2.SP1_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat eap7-insights-java-client
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.1.3-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat eap7-ironjacamar
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.5.18-1.Final_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat eap7-jboss-cert-helper
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.1.3-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat eap7-jboss-ejb-client
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:4.0.55-1.Final_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat eap7-jboss-server-migration
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.10.0-39.Final_redhat_00039.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat eap7-jbossws-cxf
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:5.4.12-1.Final_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat eap7-jsoup
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.15.4-1.redhat_00003.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat eap7-undertow-jastow
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.0.15-1.Final_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat eap7-wildfly
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:7.4.19-1.GA_redhat_00002.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Red Hat eap7-xalan-j2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.7.1-37.redhat_00015.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat eap7-hal-console
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.3.24-1.Final_redhat_00001.1.el7eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat eap7-hibernate-validator
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:6.0.23-2.SP1_redhat_00001.1.el7eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat eap7-insights-java-client
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.1.3-1.redhat_00001.1.el7eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat eap7-ironjacamar
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.5.18-1.Final_redhat_00001.1.el7eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat eap7-jboss-cert-helper
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.1.3-1.redhat_00001.1.el7eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat eap7-jboss-ejb-client
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:4.0.55-1.Final_redhat_00001.1.el7eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat eap7-jboss-server-migration
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.10.0-39.Final_redhat_00039.1.el7eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat eap7-jbossws-cxf
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:5.4.12-1.Final_redhat_00001.1.el7eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat eap7-jsoup
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.15.4-1.redhat_00003.1.el7eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat eap7-undertow-jastow
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.0.15-1.Final_redhat_00001.1.el7eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat eap7-wildfly
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:7.4.19-1.GA_redhat_00002.1.el7eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Red Hat eap7-xalan-j2
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.7.1-37.redhat_00015.1.el7eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8 Red Hat wildfly-domain-http
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unaffected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-activemq-artemis
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.33.0-1.redhat_00015.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-activemq-artemis-native
https://access.redhat.com/downloads/content/package-browser/ |
≥ 1:2.0.0-2.redhat_00005.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-aesh-extensions
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.8.0-2.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-aesh-readline
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.2.0-2.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-apache-commons-codec
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.16.1-2.redhat_00007.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-apache-commons-collections
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.2.2-28.redhat_2.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-apache-commons-io
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.15.1-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-apache-commons-lang
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.14.0-2.redhat_00006.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-apache-cxf
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:4.0.5-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-artemis-native
https://access.redhat.com/downloads/content/package-browser/ |
≥ 1:2.0.0-2.redhat_00005.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-artemis-wildfly-integration
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.0.1-1.redhat_00002.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-asyncutil
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:0.1.0-2.redhat_00010.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-aws-java-sdk
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.12.284-2.redhat_00002.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-cryptacular
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.2.5-2.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-eap-product-conf-parent
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:800.4.0-1.GA_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-fastinfoset
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.1.0-4.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-hibernate
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:6.2.31-1.Final_redhat_00002.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-hibernate-validator
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:8.0.1-3.Final_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-hppc
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:0.8.1-2.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-insights-java-client
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.1.3-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-jakarta-servlet-jsp-jstl-api
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.0.1-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-jboss-cert-helper
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.1.3-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-jboss-logging
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.5.3-1.Final_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-jctools
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:4.0.2-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-jgroups
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:5.3.10-1.Final_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-log4j
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.22.1-1.redhat_00002.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-narayana
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:6.0.3-1.Final_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-nimbus-jose-jwt
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:9.37.3-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-objectweb-asm
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:9.6.0-1.redhat_00002.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-pem-keystore
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.3.0-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-resteasy-extensions
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.0.1-3.Final_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-resteasy-spring
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.0.1-2.Final_redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-saaj-impl
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.0.4-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-shibboleth-java-support
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:8.0.0-6.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-slf4j
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.0.16-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-snakeyaml
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.2.0-1.redhat_00001.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Red Hat eap8-wildfly
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:8.0.4-2.GA_redhat_00005.1.el8eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-activemq-artemis
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.33.0-1.redhat_00015.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-activemq-artemis-native
https://access.redhat.com/downloads/content/package-browser/ |
≥ 1:2.0.0-2.redhat_00005.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-aesh-extensions
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.8.0-2.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-aesh-readline
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.2.0-2.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-apache-commons-codec
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.16.1-2.redhat_00007.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-apache-commons-collections
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.2.2-28.redhat_2.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-apache-commons-io
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.15.1-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-apache-commons-lang
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.14.0-2.redhat_00006.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-apache-cxf
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:4.0.5-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-artemis-native
https://access.redhat.com/downloads/content/package-browser/ |
≥ 1:2.0.0-2.redhat_00005.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-artemis-wildfly-integration
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.0.1-1.redhat_00002.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-asyncutil
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:0.1.0-2.redhat_00010.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-aws-java-sdk
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.12.284-2.redhat_00002.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-cryptacular
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.2.5-2.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-eap-product-conf-parent
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:800.4.0-1.GA_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-fastinfoset
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.1.0-4.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-hibernate
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:6.2.31-1.Final_redhat_00002.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-hibernate-validator
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:8.0.1-3.Final_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-hppc
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:0.8.1-2.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-insights-java-client
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.1.3-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-jakarta-servlet-jsp-jstl-api
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.0.1-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-jboss-cert-helper
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:1.1.3-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-jboss-logging
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.5.3-1.Final_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-jctools
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:4.0.2-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-jgroups
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:5.3.10-1.Final_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-log4j
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.22.1-1.redhat_00002.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-narayana
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:6.0.3-1.Final_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-nimbus-jose-jwt
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:9.37.3-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-objectweb-asm
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:9.6.0-1.redhat_00002.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-pem-keystore
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.3.0-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-resteasy-extensions
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.0.1-3.Final_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-resteasy-spring
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.0.1-2.Final_redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-saaj-impl
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:3.0.4-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-shibboleth-java-support
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:8.0.0-6.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-slf4j
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.0.16-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-snakeyaml
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:2.2.0-1.redhat_00001.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Red Hat eap8-wildfly
https://access.redhat.com/downloads/content/package-browser/ |
≥ 0:8.0.4-2.GA_redhat_00005.1.el9eap; < * (unaffected, rpm)
Other versions: affected |
CNA: redhat |
| Red Hat Build of Keycloak Red Hat wildfly-domain-http
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unaffected |
CNA: redhat |
| Red Hat Data Grid 8 Red Hat wildfly-domain-http
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unaffected |
CNA: redhat |
| Red Hat Fuse 7 Red Hat wildfly-domain-http
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unknown |
CNA: redhat |
| Red Hat JBoss Data Grid 7 Red Hat wildfly-domain-http
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html |
Range not reported
Other versions: unknown |
CNA: redhat |
| Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat wildfly-domain-http
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html |
Range not reported
Other versions: unaffected |
CNA: redhat |
| Red Hat Process Automation 7 Red Hat wildfly-domain-http
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: unknown |
CNA: redhat |
| Red Hat Single Sign-On 7 Red Hat wildfly-domain-http
https://access.redhat.com/downloads/content/package-browser/ |
Range not reported
Other versions: affected |
CNA: redhat |
org.wildfly:wildfly-domain-httporg.wildfly:wildfly-domain-http
Maven |
8.0.0.Alpha1 (affected, Maven) 8.0.0.Alpha2 (affected, Maven) 8.0.0.Alpha3 (affected, Maven) 8.0.0.Alpha4 (affected, Maven) 8.0.0.Beta1 (affected, Maven) 8.0.0.CR1 (affected, Maven) 8.0.0.Final (affected, Maven) 8.1.0.CR1 (affected, Maven) 8.1.0.CR2 (affected, Maven) 8.1.0.Final (affected, Maven) 8.2.0.Final (affected, Maven) 8.2.1.Final (affected, Maven) Ecosystem version events: introduced 0; last affected 24.0.0.Final Source events (ECOSYSTEM)Other versions: unaffected |
OSV GHSA-x7g6-rwhc-g7mj |
Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.
CVSS assessments
| Version / score | Vector | Authority |
|---|---|---|
| 3.1 / 4.1 medium |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H | CNA: redhat |
| 3.1 / 4.1 medium |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H | NVD: [email protected] |
Exploit evidence
No exploit evidence in collected sources. This is not proof of no exploitation.
References
- https://access.redhat.com/errata/RHSA-2024:8075CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:8076CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:8077CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:8080CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:8823CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:8824CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:8826CNA: redhat · vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2024-4029CNA: redhat · vdb-entry, x_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2278615CNA: redhat · issue-tracking, x_refsource_REDHAT
- https://github.com/advisories/GHSA-x7g6-rwhc-g7mjCNA: redhat
- https://github.com/wildfly/wildfly/pull/17914CNA: redhat
- https://github.com/wildfly/wildfly/pull/17935CNA: redhat
- https://access.redhat.com/security/cve/CVE-2024-4029ADP: CVE · vdb-entry, x_refsource_REDHAT, x_transferred
- https://bugzilla.redhat.com/show_bug.cgi?id=2278615ADP: CVE · issue-tracking, x_refsource_REDHAT, x_transferred
- https://access.redhat.com/errata/RHSA-2024:8075[email protected]
- https://access.redhat.com/errata/RHSA-2024:8076[email protected]
- https://access.redhat.com/errata/RHSA-2024:8077[email protected]
- https://access.redhat.com/errata/RHSA-2024:8080[email protected]
- https://access.redhat.com/errata/RHSA-2024:8823[email protected]
- https://access.redhat.com/errata/RHSA-2024:8824[email protected]
- https://access.redhat.com/errata/RHSA-2024:8826[email protected]
- https://access.redhat.com/security/cve/CVE-2024-4029[email protected]
- https://bugzilla.redhat.com/show_bug.cgi?id=2278615[email protected]
- https://github.com/advisories/GHSA-x7g6-rwhc-g7mj[email protected]
- https://github.com/wildfly/wildfly/pull/17914[email protected]
- https://github.com/wildfly/wildfly/pull/17935[email protected]
- https://access.redhat.com/security/cve/CVE-2024-4029af854a3a-2127-422b-91ae-364da2661108
- https://bugzilla.redhat.com/show_bug.cgi?id=2278615af854a3a-2127-422b-91ae-364da2661108
- https://github.com/advisories/GHSA-x7g6-rwhc-g7mjOSV / GitHub Security Advisories · advisory
- https://osv.dev/vulnerability/GHSA-x7g6-rwhc-g7mjOSV / GitHub Security Advisories · osv
For agents and automation
Read public disclosures for free as Markdown or JSON. Compatible browsers also expose native WebMCP tools to search disclosures, read this page, and discover API access.
Use the ontology-linked Cyber API with x402 pay per request, or a Y2 Pro or Elite API key with the intel:cyber scope.
Endpoints and access details
https://api.y2.dev/api/v2/cyber/cveshttps://api.y2.dev/api/v2/cyber/cves/{cveId}
A workspace owner or admin can create a Pro or Elite API key. Send Authorization: Bearer <Y2_API_KEY> from your trusted agent runtime.
For x402, omit Authorization and read the HTTP 402 payment challenge before signing a retry. Public browser tools do not make payments.