https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 15:31:55 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-09331 cnvd-2018-09331 https://cve.radiocsirt.org/vuln/cnvd-2018-09331 https://cve.radiocsirt.org/vuln/euvd-2026-64773 EUVD-2026-64773 https://cve.radiocsirt.org/vuln/euvd-2026-64773 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10682 <p>An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on TCP port 9990 without any authentication using &#34;anonymous&#34; access that is automatically created. Once logged in, a misconfiguration present by default (auto-deployment) permits an anonymous user to deploy a malicious .war file, leading to remote code execution. NOTE: the vendor indicates that anonymous access is not available in the default installation; however, it remains optional because there are several use cases for it, including development environments and network architectures that have a proxy server for access control to the WildFly server</p> <p>An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on TCP port 9990 without any authentication using &#34;anonymous&#34; access that is automatically created. Once logged in, a misconfiguration present by default (auto-deployment) permits an anonymous user to deploy a malicious .war file, leading to remote code execution. NOTE: the vendor indicates that anonymous access is not available in the default installation; however, it remains optional because there are several use cases for it, including development environments and network architectures that have a proxy server for access control to the WildFly server</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10682 https://cve.radiocsirt.org/vuln/ghsa-5frm-69j4-hgp7 <p>** DISPUTED ** An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on TCP port 9990 without any authentication using &#34;anonymous&#34; access that is automatically created. Once logged in, a misconfiguration present by default (auto-deployment) permits an anonymous user to deploy a malicious .war file, leading to remote code execution. NOTE: the vendor indicates that anonymous access is not available in the default installation; however, it remains optional because there are several use cases for it, including development environments and network architectures that have a proxy server for access control to the WildFly server.</p> <p>** DISPUTED ** An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on TCP port 9990 without any authentication using &#34;anonymous&#34; access that is automatically created. Once logged in, a misconfiguration present by default (auto-deployment) permits an anonymous user to deploy a malicious .war file, leading to remote code execution. NOTE: the vendor indicates that anonymous access is not available in the default installation; however, it remains optional because there are several use cases for it, including development environments and network architectures that have a proxy server for access control to the WildFly server.</p> https://cve.radiocsirt.org/vuln/ghsa-5frm-69j4-hgp7 https://cve.radiocsirt.org/vuln/gsd-2018-10682 gsd-2018-10682 https://cve.radiocsirt.org/vuln/gsd-2018-10682