CVE-2025-23368

High CVSS: 8.1

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.

Vendor

Redhat

Product

Wildfly Core

CWE

CWE-307

Yayın Tarihi

2025-03-04 16:15:39

Güncelleme

2026-02-13 16:43:08

Source Identifier

secalert@redhat.com

KEV Date Added

Kategoriler

CWE-307 Wildfly Core HIGH Redhat 2025

Referanslar

https://access.redhat.com/security/cve/CVE-2025-23368 https://bugzilla.redhat.com/show_bug.cgi?id=2337621 https://www.gruppotim.it/it/footer/red-team.html

Benzer Kayıtlar

High

CVE-2026-28369

A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more…

High

CVE-2026-28368

A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where…

Medium

CVE-2026-3121

A flaw was found in Keycloak. An administrator with `manage-clients` permission can exploit a misconfiguration where thi…

Medium

CVE-2026-3190

A flaw was found in Keycloak. The User-Managed Access (UMA) 2.0 Protection API endpoint for permission tickets fails to…

Low

CVE-2026-4874

A flaw was found in Keycloak. An authenticated attacker can perform Server-Side Request Forgery (SSRF) by manipulating t…

Low

CVE-2026-4633

A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login…