{"metadata": {"vulnerability": "cve-2025-23367", "count": 123, "kinds": {"milestone": 14, "sighting": 6, "kev": 0, "other": 103}}, "data": [{"timestamp": "2024-10-03T11:32:48.936Z", "date_only": false, "value": "2024-10-03T11:32:48.936000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2024-10-03T12:00:40.921Z", "date_only": false, "value": "2024-10-03T12:00:40.921058+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2024-11-04T00:00:00Z", "date_only": false, "value": "2024-11-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2024-11-04T00:00:00Z", "date_only": false, "value": "2024-11-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2024-11-04T18:00:59.553Z", "date_only": false, "value": "2024-11-04T18:00:59.553511+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2024-11-04T18:00:59.553Z", "date_only": false, "value": "2024-11-04T18:00:59.553511+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2024-11-12T15:50:08.334Z", "date_only": false, "value": "2024-11-12T15:50:08.334000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-11-12T15:50:08.334Z", "date_only": false, "value": "2024-11-12T15:50:08.334000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-11-12T15:50:08.334Z", "date_only": false, "value": "2024-11-12T15:50:08.334000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-11-12T16:01:18.772Z", "date_only": false, "value": "2024-11-12T16:01:18.772613+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-11-12T16:01:18.772Z", "date_only": false, "value": "2024-11-12T16:01:18.772613+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-11-12T16:01:18.772Z", "date_only": false, "value": "2024-11-12T16:01:18.772613+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-12-09T00:00:00Z", "date_only": false, "value": "2024-12-09T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3989", "record": "RHSA-2025:3989", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-12-09T00:00:00Z", "date_only": false, "value": "2024-12-09T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3990", "record": "RHSA-2025:3990", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-12-09T00:00:00Z", "date_only": false, "value": "2024-12-09T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3992", "record": "RHSA-2025:3992", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-12-09T16:26:06.388Z", "date_only": false, "value": "2024-12-09T16:26:06.388000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3989", "record": "RHSA-2025:3989", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-12-09T16:26:06.388Z", "date_only": false, "value": "2024-12-09T16:26:06.388000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3990", "record": "RHSA-2025:3990", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-12-09T16:26:06.388Z", "date_only": false, "value": "2024-12-09T16:26:06.388000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3992", "record": "RHSA-2025:3992", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-01-14T14:56:46.389Z", "date_only": false, "value": "2025-01-14T14:56:46.389000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2025-01-14T14:56:46.389Z", "date_only": false, "value": "2025-01-14T14:56:46.389000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2025-01-14T14:56:46.389Z", "date_only": false, "value": "2025-01-14T14:56:46.389000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3989", "record": "RHSA-2025:3989", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2025-01-14T14:56:46.389Z", "date_only": false, "value": "2025-01-14T14:56:46.389000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3990", "record": "RHSA-2025:3990", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2025-01-14T14:56:46.389Z", "date_only": false, "value": "2025-01-14T14:56:46.389000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3992", "record": "RHSA-2025:3992", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2025-01-14T14:56:46.389Z", "date_only": false, "value": "2025-01-14T14:56:46.389000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2025-01-14T14:56:46.389Z", "date_only": false, "value": "2025-01-14T14:56:46.389Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "cve-2025-23367", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-01-14T15:23:42.645Z", "date_only": false, "value": "2025-01-14T15:23:42.645Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-23367", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": false, "value": "2025-01-30T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "cve-2025-23367", "field": "containers.cna.datePublic"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": false, "value": "2025-01-30T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": false, "value": "2025-01-30T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": false, "value": "2025-01-30T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3989", "record": "RHSA-2025:3989", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": false, "value": "2025-01-30T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3990", "record": "RHSA-2025:3990", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": false, "value": "2025-01-30T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3992", "record": "RHSA-2025:3992", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": false, "value": "2025-01-30T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": false, "value": "2025-01-30T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "cve-2025-23367", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2025-01-30T14:30:04.227Z", "date_only": false, "value": "2025-01-30T14:30:04.227Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-23367", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-30T14:54:55.951Z", "date_only": false, "value": "2025-01-30T14:54:55.951787Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-23367", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-30T14:54:55.951Z", "date_only": false, "value": "2025-01-30T14:54:55.951787Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23367", "record": "FKIE_CVE-2025-23367", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-30T15:15:18.610Z", "date_only": false, "value": "2025-01-30T15:15:18.610", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23367", "record": "FKIE_CVE-2025-23367", "field": "published"}, {"timestamp": "2025-01-30T15:16:10.348Z", "date_only": false, "value": "2025-01-30T15:16:10.348374Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnyemmy2e", "record": "CVE-2025-23367", "field": "creation_timestamp", "uuid": "503331a4-2c23-4c33-9e28-bfa9c8ad0c40", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnyemmy2e"}, {"timestamp": "2025-01-30T18:12:24Z", "date_only": false, "value": "2025-01-30T18:12:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3499", "record": "CVE-2025-23367", "field": "creation_timestamp", "uuid": "2b6738a8-edbc-494e-affe-4b0d566703e2", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23367\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor role is supposed to have only read access permissions and should not be able to suspend the server. \nThe vulnerability is caused by the Suspend and Resume handlers not performing authorization checks to validate whether the current user has the required permissions to proceed with the action.\n\ud83d\udccf Published: 2025-01-30T15:31:39Z\n\ud83d\udccf Modified: 2025-01-30T17:56:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-23367\n2. https://access.redhat.com/security/cve/CVE-2025-23367\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2337620", "url": "https://t.me/DarkWebInformer_CVEAlerts/3499"}, {"timestamp": "2025-01-30T18:27:06Z", "date_only": false, "value": "2025-01-30T18:27:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/16801", "record": "CVE-2025-23367", "field": "creation_timestamp", "uuid": "8aa60cc8-7416-4fea-aca3-f7985877f67a", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23367 - Wildfly Server Unauthorized Management Operation\", \n  \"Content\": \"CVE ID : CVE-2025-23367 \nPublished : Jan. 30, 2025, 3:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor role is supposed to have only read access permissions and should not be able to suspend the server.   \nThe vulnerability is caused by the Suspend and Resume handlers not performing authorization checks to validate whether the current user has the required permissions to proceed with the action. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/16801"}, {"timestamp": "2025-01-30T23:00:00Z", "date_only": false, "value": "2025-01-30T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0230", "record": "WID-SEC-W-2025-0230", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-30T23:00:00Z", "date_only": false, "value": "2025-01-30T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0230", "record": "WID-SEC-W-2025-0230", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-30T23:00:00Z", "date_only": false, "value": "2025-01-30T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0230", "record": "WID-SEC-W-2025-0230", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-31T17:34:30Z", "date_only": false, "value": "2025-01-31T17:34:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QR6X-62GQ-4CCP", "record": "GHSA-QR6X-62GQ-4CCP", "field": "published"}, {"timestamp": "2025-01-31T18:15:44Z", "date_only": false, "value": "2025-01-31T18:15:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3674", "record": "CVE-2025-23367", "field": "creation_timestamp", "uuid": "2808a6cd-ee9f-4b9a-a8dd-a394c26b5d27", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23367\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor role is supposed to have only read access permissions and should not be able to suspend the server. The vulnerability is caused by the Suspend and Resume handlers not performing authorization checks to validate whether the current user has the required permissions to proceed with the action.\n\n### Impact\nStandalone server (Domain mode is not affected) with use access control enabled with RBAC provider can be suspended or resumed by unauthorized users. When a server is suspended, the server will stop receiving user requests. The resume handle does the opposite; it will cause a suspended server to start accepting user requests.\n\n### Patches\nFixed in [WildFly Core 27.0.1.Final](https://github.com/wildfly/wildfly-core/releases/tag/27.0.1.Final)\n\n### Workarounds\nNo workaround available\n\n### References\nSee also: https://issues.redhat.com/browse/WFCORE-7153\n\n### Acknowledgements\nThe WildFly project would like to thank Claudia Bartolini (TIM S.p.A), Marco Ventura (TIM S.p.A), and Massimiliano Brolli (TIM S.p.A) for reporting this issue. https://www.gruppotim.it/it/footer/red-team.html\n\n\ud83d\udccf Published: 2025-01-31T17:34:30Z\n\ud83d\udccf Modified: 2025-01-31T17:34:30Z\n\ud83d\udd17 References:\n1. https://github.com/wildfly/wildfly-core/security/advisories/GHSA-qr6x-62gq-4ccp\n2. https://nvd.nist.gov/vuln/detail/CVE-2025-23367\n3. https://access.redhat.com/security/cve/CVE-2025-23367\n4. https://bugzilla.redhat.com/show_bug.cgi?id=2337620\n5. https://github.com/wildfly/wildfly-core", "url": "https://t.me/DarkWebInformer_CVEAlerts/3674"}, {"timestamp": "2025-02-10T21:57:28.730Z", "date_only": false, "value": "2025-02-10T21:57:28.730000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2025-02-10T21:57:28.730Z", "date_only": false, "value": "2025-02-10T21:57:28.730000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2025-02-10T21:57:28.730Z", "date_only": false, "value": "2025-02-10T21:57:28.730000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2025-02-10T22:02:17.197Z", "date_only": false, "value": "2025-02-10T22:02:17.197000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2025-02-10T22:02:17.197Z", "date_only": false, "value": "2025-02-10T22:02:17.197000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2025-02-10T22:02:17.197Z", "date_only": false, "value": "2025-02-10T22:02:17.197000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2025-02-10T23:00:52.785Z", "date_only": false, "value": "2025-02-10T23:00:52.785132+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2025-02-10T23:00:52.785Z", "date_only": false, "value": "2025-02-10T23:00:52.785132+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2025-02-10T23:00:52.785Z", "date_only": false, "value": "2025-02-10T23:00:52.785132+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2025-02-10T23:00:54.794Z", "date_only": false, "value": "2025-02-10T23:00:54.794769+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2025-02-10T23:00:54.794Z", "date_only": false, "value": "2025-02-10T23:00:54.794769+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2025-02-10T23:00:54.794Z", "date_only": false, "value": "2025-02-10T23:00:54.794769+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2025-02-12T19:51:12.850Z", "date_only": false, "value": "2025-02-12T19:51:12.850Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-23367", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-26T03:24:38Z", "date_only": false, "value": "2025-02-26T03:24:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5440", "record": "CVE-2025-23367", "field": "creation_timestamp", "uuid": "95fcdc72-9de0-40fc-8a3b-3444c0d19e03", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23367\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor role is supposed to have only read access permissions and should not be able to suspend the server. \nThe vulnerability is caused by the Suspend and Resume handlers not performing authorization checks to validate whether the current user has the required permissions to proceed with the action.\n\ud83d\udccf Published: 2025-01-30T14:30:04.227Z\n\ud83d\udccf Modified: 2025-02-26T02:57:08.314Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-23367\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2337620\n3. https://github.com/advisories/GHSA-qr6x-62gq-4ccp", "url": "https://t.me/DarkWebInformer_CVEAlerts/5440"}, {"timestamp": "2025-04-01T13:06:47Z", "date_only": false, "value": "2025-04-01T13:06:47+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-01T13:06:47Z", "date_only": false, "value": "2025-04-01T13:06:47+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-04-01T13:06:47Z", "date_only": false, "value": "2025-04-01T13:06:47+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-01T13:12:18Z", "date_only": false, "value": "2025-04-01T13:12:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-01T13:12:18Z", "date_only": false, "value": "2025-04-01T13:12:18+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-04-01T13:12:18Z", "date_only": false, "value": "2025-04-01T13:12:18+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-01T13:32:37Z", "date_only": false, "value": "2025-04-01T13:32:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9892", "record": "CVE-2025-23367", "field": "creation_timestamp", "uuid": "48804b51-f265-4f6d-b794-e57344da5f69", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23367\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor role is supposed to have only read access permissions and should not be able to suspend the server. \nThe vulnerability is caused by the Suspend and Resume handlers not performing authorization checks to validate whether the current user has the required permissions to proceed with the action.\n\ud83d\udccf Published: 2025-01-30T14:30:04.227Z\n\ud83d\udccf Modified: 2025-04-01T13:15:24.222Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:3465\n2. https://access.redhat.com/errata/RHSA-2025:3467\n3. https://access.redhat.com/security/cve/CVE-2025-23367\n4. https://bugzilla.redhat.com/show_bug.cgi?id=2337620\n5. https://github.com/advisories/GHSA-qr6x-62gq-4ccp", "url": "https://t.me/DarkWebInformer_CVEAlerts/9892"}, {"timestamp": "2025-04-01T22:00:00Z", "date_only": false, "value": "2025-04-01T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0230", "record": "WID-SEC-W-2025-0230", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-04-17T14:32:59Z", "date_only": false, "value": "2025-04-17T14:32:59+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3989", "record": "RHSA-2025:3989", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-17T14:32:59Z", "date_only": false, "value": "2025-04-17T14:32:59+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:3989", "record": "RHSA-2025:3989", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-04-17T14:32:59Z", "date_only": false, "value": "2025-04-17T14:32:59+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:3989", "record": "RHSA-2025:3989", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-17T14:33:34Z", "date_only": false, "value": "2025-04-17T14:33:34+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3990", "record": "RHSA-2025:3990", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-17T14:33:34Z", "date_only": false, "value": "2025-04-17T14:33:34+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:3990", "record": "RHSA-2025:3990", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-04-17T14:33:34Z", "date_only": false, "value": "2025-04-17T14:33:34+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:3990", "record": "RHSA-2025:3990", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-17T14:38:04Z", "date_only": false, "value": "2025-04-17T14:38:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3992", "record": "RHSA-2025:3992", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-17T14:38:04Z", "date_only": false, "value": "2025-04-17T14:38:04+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:3992", "record": "RHSA-2025:3992", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-04-17T14:38:04Z", "date_only": false, "value": "2025-04-17T14:38:04+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:3992", "record": "RHSA-2025:3992", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-21T22:00:00Z", "date_only": false, "value": "2025-04-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0230", "record": "WID-SEC-W-2025-0230", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-05-06T14:28:01Z", "date_only": false, "value": "2025-05-06T14:28:01+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-05-06T14:28:01Z", "date_only": false, "value": "2025-05-06T14:28:01+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-05-06T14:28:01Z", "date_only": false, "value": "2025-05-06T14:28:01+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-05-06T22:00:00Z", "date_only": false, "value": "2025-05-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0230", "record": "WID-SEC-W-2025-0230", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-05-28T13:32:08.300Z", "date_only": false, "value": "2025-05-28T13:32:08.300000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2025-05-28T13:32:08.300Z", "date_only": false, "value": "2025-05-28T13:32:08.300000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2025-05-28T14:00:56.619Z", "date_only": false, "value": "2025-05-28T14:00:56.619771+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2025-05-28T14:00:56.619Z", "date_only": false, "value": "2025-05-28T14:00:56.619771+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2025-06-25T17:02:57.428Z", "date_only": false, "value": "2025-06-25T17:02:57.428000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2025-06-25T17:02:57.428Z", "date_only": false, "value": "2025-06-25T17:02:57.428000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2025-06-25T18:00:54.693Z", "date_only": false, "value": "2025-06-25T18:00:54.693716+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2025-06-25T18:00:54.693Z", "date_only": false, "value": "2025-06-25T18:00:54.693716+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2025-10-15T08:51:55.776Z", "date_only": false, "value": "2025-10-15T08:51:55.776Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-WILDFLY-2025-23367", "record": "BIT-WILDFLY-2025-23367", "field": "published"}, {"timestamp": "2025-10-23T22:28:40Z", "date_only": false, "value": "2025-10-23T22:28:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-11-05T13:55:17Z", "date_only": false, "value": "2025-11-05T13:55:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-11-27T23:00:00Z", "date_only": false, "value": "2025-11-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0230", "record": "WID-SEC-W-2025-0230", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2025-11-27T23:00:00Z", "date_only": false, "value": "2025-11-27T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0230", "record": "WID-SEC-W-2025-0230", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-11-28T11:12:10.250Z", "date_only": false, "value": "2025-11-28T11:12:10.250+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0230", "record": "WID-SEC-W-2025-0230", "field": "document.tracking.generator.date"}, {"timestamp": "2025-12-08T19:55:55Z", "date_only": false, "value": "2025-12-08T19:55:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QR6X-62GQ-4CCP", "record": "GHSA-QR6X-62GQ-4CCP", "field": "modified"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": true, "value": "2026-05-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0671", "record": "CERTFR-2026-AVI-0671", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0671", "record": "CERTFR-2026-AVI-0671", "field": "last_revision_date"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0671", "record": "CERTFR-2026-AVI-0671", "field": "initial_release_date"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0671", "record": "CERTFR-2026-AVI-0671", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-17T23:50:34.811Z", "date_only": false, "value": "2026-09-17T23:50:34.811Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-23367", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-17T23:50:34.811Z", "date_only": false, "value": "2026-09-17T23:50:34.811Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "cve-2025-23367", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-17T23:50:51Z", "date_only": false, "value": "2026-09-17T23:50:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3989", "record": "RHSA-2025:3989", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T23:50:51Z", "date_only": false, "value": "2026-09-17T23:50:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3990", "record": "RHSA-2025:3990", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T23:50:51Z", "date_only": false, "value": "2026-09-17T23:50:51+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:3989", "record": "RHSA-2025:3989", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-17T23:50:51Z", "date_only": false, "value": "2026-09-17T23:50:51+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:3990", "record": "RHSA-2025:3990", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-17T23:50:51Z", "date_only": false, "value": "2026-09-17T23:50:51+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:3989", "record": "RHSA-2025:3989", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T23:50:51Z", "date_only": false, "value": "2026-09-17T23:50:51+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:3990", "record": "RHSA-2025:3990", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T23:50:52Z", "date_only": false, "value": "2026-09-17T23:50:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3992", "record": "RHSA-2025:3992", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T23:50:52Z", "date_only": false, "value": "2026-09-17T23:50:52+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:3992", "record": "RHSA-2025:3992", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-17T23:50:52Z", "date_only": false, "value": "2026-09-17T23:50:52+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:3992", "record": "RHSA-2025:3992", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-18T00:16:51.783Z", "date_only": false, "value": "2026-09-18T00:16:51.783", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23367", "record": "FKIE_CVE-2025-23367", "field": "lastModified"}, {"timestamp": "2026-09-18T09:06:02.240Z", "date_only": false, "value": "2026-09-18T09:06:02.240Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-WILDFLY-2025-23367", "record": "BIT-WILDFLY-2025-23367", "field": "modified"}, {"timestamp": "2026-10-20T04:34:04Z", "date_only": false, "value": "2026-10-20T04:34:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-20T04:34:04Z", "date_only": false, "value": "2026-10-20T04:34:04+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-20T04:34:04Z", "date_only": false, "value": "2026-10-20T04:34:04+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:3465", "record": "RHSA-2025:3465", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-20T04:34:05Z", "date_only": false, "value": "2026-10-20T04:34:05+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-20T04:34:05Z", "date_only": false, "value": "2026-10-20T04:34:05+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-20T04:34:05Z", "date_only": false, "value": "2026-10-20T04:34:05+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:3467", "record": "RHSA-2025:3467", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-20T04:34:09Z", "date_only": false, "value": "2026-10-20T04:34:09+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-20T04:34:09Z", "date_only": false, "value": "2026-10-20T04:34:09+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-20T04:34:09Z", "date_only": false, "value": "2026-10-20T04:34:09+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:4552", "record": "RHSA-2025:4552", "field": "document.tracking.current_release_date"}]}