CVE-2025-23366
Fixed in a distro release EPSS <1%CVSS 6.5
A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.
Products: Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Data Grid 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.jboss.hal:hal-console | 3.7.7.Final |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-cli | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-cli | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-cli | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-commons | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-commons | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-commons | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-core-client | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-core-client | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-core-client | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-dto | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-dto | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-dto | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-hornetq-protocol | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-hornetq-protocol | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-hornetq-protocol | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-hqclient-protocol | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-hqclient-protocol | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-hqclient-protocol | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jdbc-store | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jdbc-store | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jdbc-store | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jms-client | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jms-client | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jms-client | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jms-server | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jms-server | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-jms-server | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-journal | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-journal | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-journal | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-ra | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-ra | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-ra | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-selector | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-selector | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-selector | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-server | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-server | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-server | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-service-extensions | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-service-extensions | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-service-extensions | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-tools | 0:2.16.0-21.redhat_00055.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-tools | 0:2.16.0-21.redhat_00055.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-activemq-artemis-tools | 0:2.16.0-21.redhat_00055.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-apache-cxf | 0:3.5.10-1.redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-apache-cxf | 0:3.5.10-1.redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-apache-cxf | 0:3.5.10-1.redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-apache-cxf-rt | 0:3.5.10-1.redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-apache-cxf-rt | 0:3.5.10-1.redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-apache-cxf-rt | 0:3.5.10-1.redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-apache-cxf-services | 0:3.5.10-1.redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-apache-cxf-services | 0:3.5.10-1.redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-apache-cxf-services | 0:3.5.10-1.redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-apache-cxf-tools | 0:3.5.10-1.redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-apache-cxf-tools | 0:3.5.10-1.redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-apache-cxf-tools | 0:3.5.10-1.redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-artemis-native | 1:1.0.2-5.redhat_00004.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-artemis-native | 1:1.0.2-5.redhat_00004.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-artemis-native | 1:1.0.2-5.redhat_00004.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-artemis-native-debuginfo | 1:1.0.2-5.redhat_00004.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-artemis-native-wildfly | 1:1.0.2-5.redhat_00004.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-artemis-native-wildfly | 1:1.0.2-5.redhat_00004.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-artemis-native-wildfly | 1:1.0.2-5.redhat_00004.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-elytron-web | 0:1.9.6-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-elytron-web | 0:1.9.6-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-elytron-web | 0:1.9.6-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-glassfish-jsf | 0:2.3.14-9.SP10_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-glassfish-jsf | 0:2.3.14-9.SP10_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-glassfish-jsf | 0:2.3.14-9.SP10_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hal-console | 0:3.3.27-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hal-console | 0:3.3.27-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hal-console | 0:3.3.27-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hibernate-validator | 0:6.0.23-3.SP2_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hibernate-validator | 0:6.0.23-3.SP2_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hibernate-validator | 0:6.0.23-3.SP2_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hibernate-validator-cdi | 0:6.0.23-3.SP2_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hibernate-validator-cdi | 0:6.0.23-3.SP2_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hibernate-validator-cdi | 0:6.0.23-3.SP2_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar | 0:1.5.21-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar | 0:1.5.21-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar | 0:1.5.21-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-common-api | 0:1.5.21-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-common-api | 0:1.5.21-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-common-api | 0:1.5.21-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-common-impl | 0:1.5.21-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-common-impl | 0:1.5.21-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-common-impl | 0:1.5.21-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-common-spi | 0:1.5.21-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-common-spi | 0:1.5.21-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-common-spi | 0:1.5.21-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-core-api | 0:1.5.21-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-core-api | 0:1.5.21-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-core-api | 0:1.5.21-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-core-impl | 0:1.5.21-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-core-impl | 0:1.5.21-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-core-impl | 0:1.5.21-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-deployers-common | 0:1.5.21-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-deployers-common | 0:1.5.21-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-deployers-common | 0:1.5.21-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-jdbc | 0:1.5.21-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-jdbc | 0:1.5.21-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-jdbc | 0:1.5.21-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-validator | 0:1.5.21-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-validator | 0:1.5.21-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-ironjacamar-validator | 0:1.5.21-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jboss-server-migration | 0:1.10.0-42.Final_redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jboss-server-migration | 0:1.10.0-42.Final_redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jboss-server-migration | 0:1.10.0-42.Final_redhat_00042.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jboss-server-migration-cli | 0:1.10.0-42.Final_redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jboss-server-migration-cli | 0:1.10.0-42.Final_redhat_00042.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jboss-server-migration-cli | 0:1.10.0-42.Final_redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jboss-server-migration-core | 0:1.10.0-42.Final_redhat_00042.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jboss-server-migration-core | 0:1.10.0-42.Final_redhat_00042.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jboss-server-migration-core | 0:1.10.0-42.Final_redhat_00042.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jbossws-cxf | 0:5.4.15-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jbossws-cxf | 0:5.4.15-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-jbossws-cxf | 0:5.4.15-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-undertow-server | 0:1.9.6-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-undertow-server | 0:1.9.6-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-undertow-server | 0:1.9.6-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly | 0:7.4.23-3.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly | 0:7.4.23-3.GA_redhat_00002.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly | 0:7.4.23-3.GA_redhat_00002.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-elytron | 0:1.15.26-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-elytron | 0:1.15.26-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-elytron | 0:1.15.26-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-elytron-tool | 0:1.15.26-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-elytron-tool | 0:1.15.26-1.Final_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-elytron-tool | 0:1.15.26-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-java-jdk11 | 0:7.4.23-3.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-java-jdk11 | 0:7.4.23-3.GA_redhat_00002.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-java-jdk11 | 0:7.4.23-3.GA_redhat_00002.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-java-jdk17 | 0:7.4.23-3.GA_redhat_00002.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-java-jdk17 | 0:7.4.23-3.GA_redhat_00002.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-java-jdk8 | 0:7.4.23-3.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-java-jdk8 | 0:7.4.23-3.GA_redhat_00002.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-java-jdk8 | 0:7.4.23-3.GA_redhat_00002.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-javadocs | 0:7.4.23-3.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-javadocs | 0:7.4.23-3.GA_redhat_00002.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-javadocs | 0:7.4.23-3.GA_redhat_00002.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-modules | 0:7.4.23-3.GA_redhat_00002.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-modules | 0:7.4.23-3.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-wildfly-modules | 0:7.4.23-3.GA_redhat_00002.1.el9eap |