Role-Based Access Control Vulnerability in Wildfly Server
CVE-2025-23367

6.5MEDIUM

Key Information:

Status: Red Hat Jboss Enterprise Application Platform 7; Red Hat Jboss Enterprise Application Platform 8; Red Hat Jboss Enterprise Application Platform 8.0 For Rhel 8
Vendor: CVE Published:; 30 January 2025

What is CVE-2025-23367?

A vulnerability in the Wildfly Server's Role Based Access Control (RBAC) provider permits unauthorized users to execute critical management operations. Specifically, the flaw enables users with only Monitor or Auditor roles, who should be restricted to read-only access, to suspend or resume the server. This issue arises from inadequate authorization checks in the Suspend and Resume handlers, allowing actions without confirming appropriate user permissions. It's crucial for organizations to address this issue by applying the latest security patches provided by Red Hat.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch