CVE-2023-4503

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-665

Affected software

VendorProductVersions
Red HatEAP 7.4.14—
Red HatRed Hat JBoss Enterprise Application Platform 7.4 for RHEL 8—
Red HatRed Hat JBoss Enterprise Application Platform 7.4 for RHEL 8—
Red HatRed Hat JBoss Enterprise Application Platform 7.4 for RHEL 9—
Red HatRed Hat JBoss Enterprise Application Platform 7.4 for RHEL 9—
Red HatRed Hat JBoss Enterprise Application Platform 7.4 on RHEL 7—
Red HatRed Hat JBoss Enterprise Application Platform 7.4 on RHEL 7—
Red HatRed Hat JBoss Enterprise Application Platform Expansion Pack—

References

Timeline

Published
Feb 6, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-450357.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-450367.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-450377.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-450388.8An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to comCVE-2023-450397.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-45047.0Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-bCVE-2023-450407.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-450417.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-450427.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-450437.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-450447.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-450455.4Missing Authorization vulnerability in krozero WP Custom Widget area wp-custom-widget-area allows Exploiting Incorrectly Configured Access C