CVE-2026-84823 PUBLISHED

Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role

Assigner: redhat
Reserved: 02.09.2026 Published: 15.10.2026 Updated: 15.10.2026

A flaw was found in WildFly. A user with the Monitor role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal vulnerability in the take-snapshot operation. By manipulating the name parameter, this user can write a copy of the server configuration to an arbitrary location. This allows the Monitor role to read back the server configuration, including sensitive credentials, which would otherwise be restricted by RBAC, leading to information disclosure.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS Score: 7.1

Product Status

Vendor Red Hat
Product Red Hat Enterprise Linux 8
Versions Default: unaffected
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Versions Default: unaffected
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Versions Default: unaffected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: unaffected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Fuse 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: unaffected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Single Sign-On 7
Versions Default: affected

Workarounds

To mitigate this issue, restrict access to the WildFly management interface to trusted networks and users. Implement firewall rules to limit network reachability to the management ports. Additionally, review existing Role-Based Access Control (RBAC) assignments within WildFly and ensure that users are granted only the minimum necessary privileges, adhering to the principle of least privilege. Reviewing role assignments might impact functionality if users genuinely require the Monitor role for their operations.

Credits

  • Red Hat would like to thank Hung Bach Ngoc (VinSOC Labs) for reporting this issue.

References

Problem Types

  • Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE