CVE-2025-23368
moderate-risk
Published 2025-03-04
A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.
Do I need to act?
-
0.18% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.1/10
High
NETWORK
/ HIGH complexity
Affected Products (4)
Affected Vendors
References (3)
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-23368
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2337621
35
/ 100
moderate-risk
Severity
24/34 · High
Exploitability
1/34 · Minimal
Exposure
10/34 · Low