CVE:CVE-2018-1047
CNNVD:CNNVD-201801-897
Wildfly是Wildfly的一款功能强大、模块化且轻量级的应用程序服务器。
Wildfly 9.x版本存在输入验证错误漏洞。攻击者利用该漏洞导致任意本地文件信息泄露。
solution:Upgrade redhat jboss_wildfly_application_server to a higher version than 9.0.0,9.0.0:alpha1,9.0.0:beta1,9.0.0:beta2,9.0.0:cr1,9.0.0:cr2,9.0.1,9.0.2,10.0.0,10.0.0:alpha1,10.0.0:alpha2,10.0.0:alpha3,10.0.0:alpha4,10.0.0:alpha5,10.0.0:alpha6,10.0.0:beta1,10.0.0:beta2,10.0.0:cr1,10.0.0:cr2,10.0.0:cr3,10.0.0:cr4,10.0.0:cr5,10.1.0,10.1.0:cr1,11.0.0,11.0.0:alpha1,11.0.0:beta1,11.0.0:cr1,and avoid the version 9.0.0,9.0.0:alpha1,9.0.0:beta1,9.0.0:beta2,9.0.0:cr1,9.0.0:cr2,9.0.1,9.0.2,10.0.0,10.0.0:alpha1,10.0.0:alpha2,10.0.0:alpha3,10.0.0:alpha4,10.0.0:alpha5,10.0.0:alpha6,10.0.0:beta1,10.0.0:beta2,10.0.0:cr1,10.0.0:cr2,10.0.0:cr3,10.0.0:cr4,10.0.0:cr5,10.1.0,10.1.0:cr1,11.0.0,11.0.0:alpha1,11.0.0:beta1,11.0.0:cr1; Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.1.0,and avoid the version 7.1.0