CVE-2018-1047

N/A

Published: January 24, 2018 at 11:00 PM UTC

Updated: June 17, 2026 at 01:50 AM UTC

4 products affected across 1 vendorJBoss Enterprise Application PlatformJBoss Wildfly Application ServerEnterprise Linux Server

Using Wildfly by Red Hat, Inc.?

Get instant alerts when new vulnerabilities affect Wildfly - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.5%

Description

A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

JBoss Enterprise Application Platform · Red Hatrpm

95%

7.1.0

redhat-enterprise-linux-server (environment)

WildFly · Red Hat

60%

9.x

Enterprise Linux Server · Red Hatrubygemsdevice

80%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references