CVE-2022-1278

Published: Sep 13, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.

Affected (8)

Products: Redhat: Wildfly, Amq, Amq Online, Integration Camel K, Integration Service Registry, Jboss A Mq, Jboss Enterprise Application Platform Expansion Pack, Single Sign On

8 products

Integration Camel K

Integration Service Registry

Jboss Enterprise Application Platform Expansion Pack

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Wildfly	Before 27.0.0

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Redhat Amq	Version 2.0
Redhat Amq Online	All versions
Redhat Integration Camel K	All versions
Redhat Integration Service Registry	All versions
Redhat Jboss A Mq	Version 7
Redhat Jboss Enterprise Application Platform Expansion Pack	All versions
Redhat Single Sign On	Version 7.0

Related CWEs

Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (2)

https://bugzilla.redhat.com/show_bug.cgi?id=2073401

Source: secalert@redhat.com

Issue TrackingVendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2073401

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.