CVE-2025-23368

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-23368
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-23368.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-23368
Aliases
Downstream
RHSA (3)
Published
2025-03-04T15:14:47Z
Modified
2026-10-21T02:52:16Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli
Details

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-307"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/23xxx/CVE-2025-23368.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "0:7.3.18-3.GA_redhat_00001.1.el7eap"
                        },
                        {
                            "fixed":  "27.1.9.Final-redhat-00002"
                        },
                        {
                            "fixed":  "0:8.1.6-5.GA_redhat_00007.1.el8eap"
                        },
                        {
                            "fixed":  "0:8.1.6-5.GA_redhat_00007.1.el9eap"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "InverseAffectedRanges"
                }
            ]
        },
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "last_affected":  "*"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "StandardRange"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/wildfly/wildfly-core

Affected ranges

Type
GIT
Repo
https://github.com/wildfly/wildfly-core
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b4669bdbf6cd8b3528e61d5d37df7f55575036c9
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:redhat:wildfly_core:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "31.0.3"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Affected versions

1.*
1.0.0.Alpha1
1.0.0.Alpha10
1.0.0.Alpha11
1.0.0.Alpha12
1.0.0.Alpha13
1.0.0.Alpha14
1.0.0.Alpha15
1.0.0.Alpha16
1.0.0.Alpha17
1.0.0.Alpha18
1.0.0.Alpha19
1.0.0.Alpha2
1.0.0.Alpha3
1.0.0.Alpha4
1.0.0.Alpha5
1.0.0.Alpha6
1.0.0.Alpha7
1.0.0.Alpha8
1.0.0.Alpha9
1.0.0.Beta1
1.0.0.Beta2
1.0.0.Beta3
1.0.0.Beta4
1.0.0.Beta5
1.0.0.Beta6
1.0.0.CR1
10.*
10.0.0.Beta1
10.0.0.Beta2
10.0.0.Beta3
10.0.0.Beta4
10.0.0.Beta5
10.0.0.Beta6
10.0.0.Beta7
10.0.0.Beta8
10.0.0.Beta9
10.0.0.CR1
10.0.0.Final
11.*
11.0.0.Beta1
11.0.0.Beta10
11.0.0.Beta2
11.0.0.Beta3
11.0.0.Beta4
11.0.0.Beta5
11.0.0.Beta6
11.0.0.Beta7
11.0.0.Beta8
11.0.0.Beta9
11.0.0.Final
12.*
12.0.0.Beta1
12.0.0.Beta2
12.0.0.Beta3
12.0.0.Beta4
12.0.0.Final
12.0.1.Final
13.*
13.0.0.Beta1
13.0.0.Beta2
13.0.0.Beta3
13.0.0.Beta4
13.0.0.Beta5
13.0.0.Beta6
13.0.0.Final
13.0.1.Final
14.*
14.0.0.Beta1
14.0.0.Beta2
14.0.0.Beta3
14.0.0.Beta4
14.0.0.Beta5
14.0.0.Final
15.*
15.0.0.Beta1
15.0.0.Final
16.*
16.0.0.Beta1
16.0.0.Beta2
16.0.0.Beta3
16.0.0.Beta4
16.0.0.Beta5
16.0.0.Final
17.*
17.0.0.Beta1
17.0.0.Beta2
17.0.0.Beta3
17.0.0.Beta4
17.0.0.Beta5
17.0.0.Beta6
17.0.0.Beta7
17.0.0.Final
17.0.1.Final
18.*
18.0.0.Beta1
18.0.0.Beta2
18.0.0.Beta3
18.0.0.Beta5
18.0.0.Final
19.*
19.0.0.Beta1
19.0.0.Beta10
19.0.0.Beta11
19.0.0.Beta12
19.0.0.Beta13
19.0.0.Beta14
19.0.0.Beta15
19.0.0.Beta17
19.0.0.Beta18
19.0.0.Beta2
19.0.0.Beta3
19.0.0.Beta4
19.0.0.Beta5
19.0.0.Beta6
19.0.0.Beta7
19.0.0.Beta8
19.0.0.Beta9
19.0.0.Final
2.*
2.0.0.Alpha1
2.0.0.Alpha10
2.0.0.Alpha11
2.0.0.Alpha12
2.0.0.Alpha13
2.0.0.Alpha2
2.0.0.Alpha3
2.0.0.Alpha4
2.0.0.Alpha5
2.0.0.Alpha6
2.0.0.Alpha8
2.0.0.Alpha9
2.0.0.Beta1
2.0.0.Beta2
2.0.0.Beta3
2.0.0.Beta4
2.0.0.Beta5
2.0.0.Beta6
2.0.0.Beta7
2.0.0.CR1
2.0.0.CR2
2.0.0.CR3
2.0.0.CR4
2.0.0.CR5
2.0.0.CR6
2.0.0.CR7
2.0.0.CR8
2.0.0.CR9
2.0.0.Final
2.0.10.Final
2.0.2.Final
2.0.3.Final
2.0.4.Final
2.0.5.CR1
2.0.5.Final
2.0.6.Final
2.0.7.Final
2.0.8.Final
2.0.9.Final
2.1.0.CR1
2.1.0.CR2
2.1.0.Final
20.*
20.0.0.Beta1
20.0.0.Beta2
20.0.0.Beta3
20.0.0.Beta4
20.0.0.Beta5
20.0.0.Beta6
20.0.0.Beta7
20.0.0.Beta8
20.0.0.Final
21.*
21.0.0.Beta1
21.0.0.Beta2
21.0.0.Beta3
21.0.0.Beta4
21.1.0.Beta1
21.1.0.Beta2
21.1.0.Final
22.*
22.0.0.Beta1
22.0.0.Beta2
22.0.0.Beta3
22.0.0.Final
23.*
23.0.0.Beta1
23.0.0.Beta2
23.0.0.Beta3
23.0.0.Beta4
23.0.0.Beta5
23.0.0.Final
24.*
24.0.0.Beta1
24.0.0.Beta2
24.0.0.Final
25.*
25.0.0.Beta1
25.0.0.Beta2
25.0.0.Beta3
25.0.0.Beta4
25.0.0.Beta5
25.0.0.Final
26.*
26.0.0.Beta1
26.0.0.Beta2
26.0.0.Beta3
26.0.0.Beta4
26.0.0.Beta5
26.0.0.Final
27.*
27.0.0.Beta1
27.0.0.Beta2
27.0.0.Beta3
27.0.0.Beta4
27.0.0.Beta5
27.0.0.Beta6
27.0.0.Beta7
27.0.0.Final
28.*
28.0.0.Beta1
28.0.0.Beta3
28.0.0.Beta4
28.0.0.Beta5
28.0.0.Beta6
28.0.0.Final
29.*
29.0.0.Beta1
29.0.0.Beta2
29.0.0.Beta3
29.0.0.Beta4
29.0.0.Beta5
29.0.0.Beta6
29.0.0.Final
3.*
3.0.0.Alpha1
3.0.0.Alpha10
3.0.0.Alpha11
3.0.0.Alpha12
3.0.0.Alpha13
3.0.0.Alpha14
3.0.0.Alpha15
3.0.0.Alpha16
3.0.0.Alpha17
3.0.0.Alpha18
3.0.0.Alpha19
3.0.0.Alpha2
3.0.0.Alpha20
3.0.0.Alpha21
3.0.0.Alpha22
3.0.0.Alpha23
3.0.0.Alpha24
3.0.0.Alpha25
3.0.0.Alpha3
3.0.0.Alpha4
3.0.0.Alpha5
3.0.0.Alpha6
3.0.0.Alpha7
3.0.0.Alpha8
3.0.0.Alpha9
3.0.0.Beta1
3.0.0.Beta11
3.0.0.Beta12
3.0.0.Beta13
3.0.0.Beta14
3.0.0.Beta15
3.0.0.Beta16
3.0.0.Beta16-pre
3.0.0.Beta18
3.0.0.Beta19
3.0.0.Beta2
3.0.0.Beta20
3.0.0.Beta21
3.0.0.Beta22
3.0.0.Beta23
3.0.0.Beta24
3.0.0.Beta25
3.0.0.Beta26
3.0.0.Beta27
3.0.0.Beta28
3.0.0.Beta29
3.0.0.Beta3
3.0.0.Beta30
3.0.0.Beta31
3.0.0.Beta4
3.0.0.Beta5
3.0.0.Beta6
3.0.0.Beta7
3.0.0.Beta8
3.0.0.Beta9
3.0.0.CR1
3.0.0.Final
30.*
30.0.0.Beta1
30.0.0.Beta2
30.0.0.Beta3
30.0.0.Beta4
30.0.0.Final
31.*
31.0.0.Beta1
31.0.0.Beta2
31.0.0.Beta3
31.0.0.Final
31.0.1.Final
31.0.2.Final
4.*
4.0.0.Alpha1
4.0.0.Alpha10
4.0.0.Alpha2
4.0.0.Alpha3
4.0.0.Alpha4
4.0.0.Alpha5
4.0.0.Alpha6
4.0.0.Alpha7
4.0.0.Alpha8
4.0.0.Alpha9
4.0.0.Beta1
4.0.0.Beta2
4.0.0.CR1
4.0.0.Final
5.*
5.0.0.Alpha1
5.0.0.Alpha2
5.0.0.Alpha3
5.0.0.Alpha4
5.0.0.Alpha5
5.0.0.Alpha6
5.0.0.Alpha7
5.0.0.Beta1
5.0.0.Beta2
5.0.0.Beta3
5.0.0.Beta4
5.0.0.Beta5
5.0.0.CR1
5.0.0.Final
6.*
6.0.0.Alpha1
6.0.0.Alpha2
6.0.0.Alpha3
6.0.0.Alpha4
6.0.0.Alpha5
6.0.0.Beta1
6.0.0.CR1
6.0.0.CR2
6.0.0.CR3
6.0.0.CR4
6.0.0.Final
6.0.1.Final
6.0.2.Final
7.*
7.0.0.Alpha1
7.0.0.Alpha2
7.0.0.Alpha4
7.0.0.Alpha5
7.0.0.Beta1
7.0.0.CR1
7.0.0.Final
8.*
8.0.0.Beta1
8.0.0.Beta2
8.0.0.Beta3
8.0.0.Beta4
8.0.0.Beta5
8.0.0.CR1
8.0.0.Final
9.*
9.0.0.Beta1
9.0.0.Beta2
9.0.0.Beta3
9.0.0.Beta4
9.0.0.Beta5
9.0.0.Beta6
9.0.0.Beta7
9.0.0.Final
9.0.1.Final

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-23368.json"