Improper input validation in Red Hat Wildfly
Priority LOW 25CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Partial Red Hat: 4 fixed, 5 without a fix
Attack profile from CVSS 3.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-22 and the CVSS impact.
Summary
A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.
Why it matters now
EPSS 0.00509 43rd percentileScored 2026-11-07
Fix Partial org.wildfly:wildfly-undertow (Maven): 12.0.0Red Hat: 5 advisoriesRed Hat: 4 fixed, 5 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Wildfly | 9.x | — | No fix listed | CNA |
| — | org.wildfly:wildfly-undertow (Maven) | before 12.0.0 | 12.0.0 | Patch available | GHSA-fmr4-w67p-vh8x |
- Wildfly VendorRed Hat Affected 9.x Fixed in — No fix listed CNA
- org.wildfly:wildfly-undertow (Maven) Vendor— Affected before 12.0.0 Fixed in 12.0.0 Patch available GHSA-fmr4-w67p-vh8x
CPE configurations NVD · 31
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.0:*:*:*:*:*:*:* | 9.0.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.0:alpha1:*:*:*:*:*:* | 9.0.0 alpha1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.0:beta1:*:*:*:*:*:* | 9.0.0 beta1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.0:beta2:*:*:*:*:*:* | 9.0.0 beta2 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.0:cr1:*:*:*:*:*:* | 9.0.0 cr1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.0:cr2:*:*:*:*:*:* | 9.0.0 cr2 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.1:*:*:*:*:*:*:* | 9.0.1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.2:*:*:*:*:*:*:* | 9.0.2 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:*:*:*:*:*:*:* | 10.0.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:alpha1:*:*:*:*:*:* | 10.0.0 alpha1 | Vulnerable | Red Hat |
- cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.0:*:*:*:*:*:*:* Versions 9.0.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.0:alpha1:*:*:*:*:*:* Versions 9.0.0 alpha1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.0:beta1:*:*:*:*:*:* Versions 9.0.0 beta1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.0:beta2:*:*:*:*:*:* Versions 9.0.0 beta2 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.0:cr1:*:*:*:*:*:* Versions 9.0.0 cr1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.0:cr2:*:*:*:*:*:* Versions 9.0.0 cr2 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.1:*:*:*:*:*:*:* Versions 9.0.1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:9.0.2:*:*:*:*:*:*:* Versions 9.0.2 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:*:*:*:*:*:*:* Versions 10.0.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:alpha1:*:*:*:*:*:* Versions 10.0.0 alpha1 Vulnerable ·Red Hat
Show 21 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:alpha2:*:*:*:*:*:* | 10.0.0 alpha2 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:alpha3:*:*:*:*:*:* | 10.0.0 alpha3 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:alpha4:*:*:*:*:*:* | 10.0.0 alpha4 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:alpha5:*:*:*:*:*:* | 10.0.0 alpha5 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:alpha6:*:*:*:*:*:* | 10.0.0 alpha6 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:beta1:*:*:*:*:*:* | 10.0.0 beta1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:beta2:*:*:*:*:*:* | 10.0.0 beta2 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:cr1:*:*:*:*:*:* | 10.0.0 cr1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:cr2:*:*:*:*:*:* | 10.0.0 cr2 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:cr3:*:*:*:*:*:* | 10.0.0 cr3 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:cr4:*:*:*:*:*:* | 10.0.0 cr4 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:cr5:*:*:*:*:*:* | 10.0.0 cr5 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.1.0:*:*:*:*:*:*:* | 10.1.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:10.1.0:cr1:*:*:*:*:*:* | 10.1.0 cr1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:11.0.0:*:*:*:*:*:*:* | 11.0.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:11.0.0:alpha1:*:*:*:*:*:* | 11.0.0 alpha1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:11.0.0:beta1:*:*:*:*:*:* | 11.0.0 beta1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_wildfly_application_server:11.0.0:cr1:*:*:*:*:*:* | 11.0.0 cr1 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:* | 7.1.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* | 6.0 | Running on | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* | 7.0 | Running on | Red Hat |
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:alpha2:*:*:*:*:*:* Versions 10.0.0 alpha2 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:alpha3:*:*:*:*:*:* Versions 10.0.0 alpha3 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:alpha4:*:*:*:*:*:* Versions 10.0.0 alpha4 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:alpha5:*:*:*:*:*:* Versions 10.0.0 alpha5 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:alpha6:*:*:*:*:*:* Versions 10.0.0 alpha6 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:beta1:*:*:*:*:*:* Versions 10.0.0 beta1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:beta2:*:*:*:*:*:* Versions 10.0.0 beta2 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:cr1:*:*:*:*:*:* Versions 10.0.0 cr1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:cr2:*:*:*:*:*:* Versions 10.0.0 cr2 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:cr3:*:*:*:*:*:* Versions 10.0.0 cr3 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:cr4:*:*:*:*:*:* Versions 10.0.0 cr4 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:cr5:*:*:*:*:*:* Versions 10.0.0 cr5 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.1.0:*:*:*:*:*:*:* Versions 10.1.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:10.1.0:cr1:*:*:*:*:*:* Versions 10.1.0 cr1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:11.0.0:*:*:*:*:*:*:* Versions 11.0.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:11.0.0:alpha1:*:*:*:*:*:* Versions 11.0.0 alpha1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:11.0.0:beta1:*:*:*:*:*:* Versions 11.0.0 beta1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_wildfly_application_server:11.0.0:cr1:*:*:*:*:*:* Versions 11.0.0 cr1 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:* Versions 7.1.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Running on ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Running on ·Red Hat
Remediation
- Fix · GHSA-fmr4-w67p-vh8x org.wildfly:wildfly-undertow (Maven) Fixed in 12.0.0 Advisory →
Red Hat 5 advisories
- RHSA-2018:2938 Released 2018-10-17 · Red Hat rating ModerateRed Hat OpenShift Application Runtimes Thorntail 2.2.0 security & bug fix update
- Text-Only RHOAR
- RHSA-2018:1251 Released 2018-04-25 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.1.2 security update
- Red Hat JBoss EAP 7.1
- RHSA-2018:1249 Released 2018-04-25 · Red Hat rating Importantjboss-ec2-eap package for EAP 7.1.2
- Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server eap7-jboss-ec2-eap-7.1.2-1.GA_redhat_1.ep7.el6, eap7-jboss-ec2-eap-samples-7.1.2-1.GA_redhat_1.ep7.el6
- Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server eap7-jboss-ec2-eap-7.1.2-1.GA_redhat_1.ep7.el7, eap7-jboss-ec2-eap-samples-7.1.2-1.GA_redhat_1.ep7.el7
Show 2 more Red Hat advisories
- RHSA-2018:1247 Released 2018-04-25 · Red Hat rating ImportantJBoss Enterprise Application Platform 7.1.2 for RHEL 7
- Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server eap7-activemq-artemis-1.5.5.010-1.redhat_1.1.ep7.el7, eap7-activemq-artemis-cli-1.5.5.010-1.redhat_1.1.ep7.el7, eap7-activemq-artemis-commons-1.5.5.010-1.redhat_1.1.ep7.el7 +47
- RHSA-2018:1248 Released 2018-04-25 · Red Hat rating ImportantJBoss Enterprise Application Platform 7.1.2 on RHEL 6
- Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server eap7-activemq-artemis-1.5.5.010-1.redhat_1.1.ep7.el6, eap7-activemq-artemis-cli-1.5.5.010-1.redhat_1.1.ep7.el6, eap7-activemq-artemis-commons-1.5.5.010-1.redhat_1.1.ep7.el6 +47
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| JBoss Developer Studio 10 | Affected | No fix planned: Out of support scope |
| Red Hat Fuse 7 | Affected | No fix yet |
| Red Hat JBoss Fuse 6 | Affected | No fix planned: Will not fix |
| Red Hat JBoss Fuse Integration Service 2 | Affected | No fix yet |
| Red Hat OpenShift Application Runtimes | Affected | No fix yet |
| Red Hat JBoss EAP 7.1 | Fixed | RHSA-2018:1251 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server | Fixed | RHSA-2018:1248, RHSA-2018:1249 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server | Fixed | RHSA-2018:1247, RHSA-2018:1249 |
| Text-Only RHOAR | Fixed | RHSA-2018:2938 |
Not affected: 2 products
- Red Hat JBoss Data Grid 7
- Red Hat Single Sign-On 7
Timeline
- 2026-10-02 Threatist record created from CVE-2018-1047
- 2026-10-03 Alias added: GHSA-fmr4-w67p-vh8x
References
Advisory 9
More Red Hat Jboss Enterprise Application Platform vulnerabilities
- TI-2017-08941 Deserialization of untrusted data in Red Hat jbossas KEVCVSS 3.1CRITICAL 9.8
- TI-2010-01790 JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for… KEVCVSS 3.1HIGH 8.8
- TI-2017-09342 Unrestricted file upload in Apache Tomcat KEVCVSS 3.1HIGH 8.1
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2010-01383 The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application… KEVCVSS 3.1HIGH 7.5
- TI-2017-09354 XML external entity injection in Apache Solr before 7.1 with Apache Lucene before 7.1 CVSS 3.1CRITICAL 9.8
Sources
- CVE-2018-1047 · CVE Program
- CVE-2018-1047 · NVD
- FIRST EPSS
- GHSA-fmr4-w67p-vh8x · GitHub Advisory Database · CC BY 4.0
- CVE-2018-1047 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences