Unsecured Server Provisioning Vulnerability in Galleon
CVE-2023-4503

6.8MEDIUM

Key Information:

Vendor: Red Hat
Status: Eap 7.4.14; Red Hat Jboss Enterprise Application Platform 7.4 For Rhel 8; Red Hat Jboss Enterprise Application Platform 7.4 For Rhel 9; Red Hat Jboss Enterprise Application Platform 7.4 On Rhel 7
Vendor: CVE Published:; 6 February 2024

What is CVE-2023-4503?

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.