CVE-2024-4029
MediumCVSS 4.1Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A vulnerability was found in Wildfly's management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.
Risk Assessment
An attacker can overload the management interface, causing the WildFly server to become unavailable to legitimate users and administrators.
Recommendation
Update WildFly to a version that introduces a connection limiting mechanism. Until then, consider using a firewall or operating system-level restrictions.
Original NVD description (English source)
A vulnerability was found in Wildfly’s management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.