What’s Vulnerable › Vulnerabilities

CVE-2018-10683

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-05-09 · updated 2026-06-17
• Weakness: CWE-287

Description

An issue was discovered in WildFly 10.1.2.Final. In the case of a default installation without a security realm reference, an attacker can successfully access the server without authentication. NOTE: the Security Realms documentation in the product's Admin Guide indicates that "without a security realm reference" implies "effectively unsecured." The vendor explicitly supports these unsecured configurations because they have valid use cases during development

Affected products

• Wildfly: 10.1.2

References

• https://github.com/kmkz/exploit/blob/master/CVE-2018-10682-CVE-2018-10683.txt
• https://github.com/kmkz/exploit/blob/master/CVE-2018-10682-CVE-2018-10683.txt

Get alerted when CVE-2018-10683 or the next vulnerability affects your stack