CVE-2023-4503

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-4503
An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://access.redhat.com/errata/RHSA-2023:7637 Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:7638 Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:7639 Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:7641 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-4503 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2184751 Issue Tracking
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform_expansion_pack:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.4:*:*:*:*:*:*:*
OR cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
History

14 Feb 2024, 00:27

Type Values Removed Values Added
First Time Redhat enterprise Linux
Redhat jboss Enterprise Application Platform
Redhat jboss Enterprise Application Platform Expansion Pack
Redhat
References () https://access.redhat.com/errata/RHSA-2023:7637 - () https://access.redhat.com/errata/RHSA-2023:7637 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2023:7638 - () https://access.redhat.com/errata/RHSA-2023:7638 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2023:7639 - () https://access.redhat.com/errata/RHSA-2023:7639 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2023:7641 - () https://access.redhat.com/errata/RHSA-2023:7641 - Vendor Advisory
References () https://access.redhat.com/security/cve/CVE-2023-4503 - () https://access.redhat.com/security/cve/CVE-2023-4503 - Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2184751 - () https://bugzilla.redhat.com/show_bug.cgi?id=2184751 - Issue Tracking
CVSS v2 : unknown
v3 : 6.8 		v2 : unknown
v3 : 7.5
CPE cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform_expansion_pack:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.4:*:*:*:*:*:*:*

06 Feb 2024, 13:53

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad de inicialización incorrecta en Galleon. Cuando se utiliza Galleon para aprovisionar servidores EAP o EAP-XP personalizados, los servidores se crean sin seguridad. Este problema podría permitir que un atacante acceda a servicios HTTP remotos disponibles en el servidor.

06 Feb 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-06 09:15

Updated : 2024-02-14 00:27

NVD link : CVE-2023-4503

Mitre link : CVE-2023-4503

CVE.ORG link : CVE-2023-4503

JSON object : View

Products Affected

redhat

  • jboss_enterprise_application_platform
  • enterprise_linux
  • jboss_enterprise_application_platform_expansion_pack
CWE
CWE-665

Improper Initialization