Skip to content
Fencer Vulns
medium 6.8

CVE-2023-4503 json

Eap-galleon: custom provisioning creates unsecured http-invoker

published 2024-02-06 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-54358

cvss
6.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.7%
EPSS 0.7% chance of exploitation in 30 days, percentile 54%
public exploits
0
none known

Summary

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.

Patch / fix

  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 0:2.2.28-1.SP1_redhat_00001.1.el8eap, 0:7.4.14-5.GA_redhat_00002.1.el8eap
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 0:2.2.28-1.SP1_redhat_00001.1.el9eap, 0:7.4.14-5.GA_redhat_00002.1.el9eap
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 0:2.2.28-1.SP1_redhat_00001.1.el7eap, 0:7.4.14-5.GA_redhat_00002.1.el7eap
  • eap7-avro jboss enterprise application platform 7.4 1.11.3-1.redhat_00001.1.el7eap
  • eap7-guava jboss enterprise application platform 7.4 32.1.1-2.jre_redhat_00001.1.el7eap
  • eap7-jandex jboss enterprise application platform 7.4 2.4.4-1.Final_redhat_00001.1.el7eap
  • eap7-yasson jboss enterprise application platform 7.4 1.0.11-4.redhat_00002.1.el7eap
  • eap7-jgroups jboss enterprise application platform 7.4 4.2.23-1.Final_redhat_00001.1.el7eap
  • eap7-wildfly jboss enterprise application platform 7.4 7.4.14-5.GA_redhat_00002.1.el7eap
  • eap7-undertow jboss enterprise application platform 7.4 2.2.28-1.SP1_redhat_00001.1.el7eap
  • eap7-weld-ejb jboss enterprise application platform 7.4 3.1.10-2.Final_redhat_00001.1.el7eap

red hat advisories RHSA-2023:7637RHSA-2023:7638RHSA-2023:7639RHSA-2024:3580RHSA-2024:3581

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-4503 updated cvss 6.8

eap-galleon: custom provisioning creates unsecured http-invoker

  • Red Hat JBoss Enterprise Application Platform Expansion Pack eap-galleon eap-galleon
    affected: no fix available
  • Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-wildfly 7.4.14-5.GA_redhat_00002.1.el7eap, eap7-undertow 2.2.28-1.SP1_redhat_00001.1.el7eap, eap7-wildfly-modules 7.4.14-5.GA_redhat_00002.1.el7eap, eap7-wildfly-javadocs 7.4.14-5.GA_redhat_00002.1.el7eap, eap7-wildfly-java-jdk8 7.4.14-5.GA_redhat_00002.1.el7eap, eap7-wildfly-java-jdk11 7.4.14-5.GA_redhat_00002.1.el7eap
    fixed: vendor fix RHSA-2023:7637
  • Red Hat JBoss EAP 7.4 for RHEL 8 eap7-wildfly 7.4.14-5.GA_redhat_00002.1.el8eap, eap7-undertow 2.2.28-1.SP1_redhat_00001.1.el8eap, eap7-wildfly-modules 7.4.14-5.GA_redhat_00002.1.el8eap, eap7-wildfly-javadocs 7.4.14-5.GA_redhat_00002.1.el8eap, eap7-wildfly-java-jdk8 7.4.14-5.GA_redhat_00002.1.el8eap, eap7-wildfly-java-jdk11 7.4.14-5.GA_redhat_00002.1.el8eap, +1 more
    fixed: vendor fix RHSA-2023:7638
  • Red Hat JBoss EAP 7.4 for RHEL 9 eap7-wildfly 7.4.14-5.GA_redhat_00002.1.el9eap, eap7-undertow 2.2.28-1.SP1_redhat_00001.1.el9eap, eap7-wildfly-modules 7.4.14-5.GA_redhat_00002.1.el9eap, eap7-wildfly-javadocs 7.4.14-5.GA_redhat_00002.1.el9eap, eap7-wildfly-java-jdk8 7.4.14-5.GA_redhat_00002.1.el9eap, eap7-wildfly-java-jdk11 7.4.14-5.GA_redhat_00002.1.el9eap, +1 more
    fixed: vendor fix RHSA-2023:7639
  • Red Hat JBoss EAP 8.0 for RHEL 8 eap8-gson 2.8.9-2.redhat_00002.1.el8eap, eap8-jaxb 4.0.2-4.redhat_00001.1.el8eap, eap8-txw2 4.0.2-4.redhat_00001.1.el8eap, eap8-xsom 4.0.2-4.redhat_00001.1.el8eap, eap8-angus 2.0.2-3.redhat_00002.1.el8eap, eap8-rngom 4.0.2-4.redhat_00001.1.el8eap, +209 more
    fixed: vendor fix RHSA-2024:3580
  • Red Hat JBoss EAP 8.0 for RHEL 9 eap8-gson 2.8.9-2.redhat_00002.1.el9eap, eap8-jaxb 4.0.2-4.redhat_00001.1.el9eap, eap8-txw2 4.0.2-4.redhat_00001.1.el9eap, eap8-xsom 4.0.2-4.redhat_00001.1.el9eap, eap8-angus 2.0.2-3.redhat_00002.1.el9eap, eap8-rngom 4.0.2-4.redhat_00001.1.el9eap, +209 more
    fixed: vendor fix RHSA-2024:3581
  • Red Hat JBoss Enterprise Application Platform wildfly-core-management-subsystem 15.0.32.Final-redhat-00001
    fixed: vendor fix RHSA-2023:7641
  • Red Hat JBoss Enterprise Application Platform 8
    fixed: vendor fix RHSA-2024:3583
show 1 more
  • Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-avro 1.11.3-1.redhat_00001.1.el7eap, eap7-yasson 1.0.11-4.redhat_00002.1.el7eap, eap7-guava 32.1.1-2.jre_redhat_00001.1.el7eap, eap7-apache-sshd 2.9.3-1.redhat_00001.1.el7eap, eap7-jandex 2.4.4-1.Final_redhat_00001.1.el7eap, eap7-jgroups 4.2.23-1.Final_redhat_00001.1.el7eap, +49 more Red Hat JBoss EAP 7.4 for RHEL 8 eap7-avro 1.11.3-1.redhat_00001.1.el8eap, eap7-yasson 1.0.11-4.redhat_00002.1.el8eap, eap7-guava 32.1.1-2.jre_redhat_00001.1.el8eap, eap7-apache-sshd 2.9.3-1.redhat_00001.1.el8eap, eap7-jandex 2.4.4-1.Final_redhat_00001.1.el8eap, eap7-jgroups 4.2.23-1.Final_redhat_00001.1.el8eap, +49 more Red Hat JBoss EAP 7.4 for RHEL 9 eap7-avro 1.11.3-1.redhat_00001.1.el9eap, eap7-yasson 1.0.11-4.redhat_00002.1.el9eap, eap7-guava 32.1.1-2.jre_redhat_00001.1.el9eap, eap7-apache-sshd 2.9.3-1.redhat_00001.1.el9eap, eap7-jandex 2.4.4-1.Final_redhat_00001.1.el9eap, eap7-jgroups 4.2.23-1.Final_redhat_00001.1.el9eap, +47 more Red Hat JBoss Enterprise Application Platform pom.xml, c3 0.6.0, c3 0.7.1, d3 5.9.2, fs 2.1.2, ip 2.0.0, +1555 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.72% chance of exploitation in the next 30 days, higher than 54% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

  • Red Hat EAP 7.4.14
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
  • Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.