diff --git a/advisories/github-reviewed/2025/03/GHSA-3jxr-23ph-c89g/GHSA-3jxr-23ph-c89g.json b/advisories/github-reviewed/2025/03/GHSA-3jxr-23ph-c89g/GHSA-3jxr-23ph-c89g.json index c544e6b1f1382..7cc6161d2a346 100644 --- a/advisories/github-reviewed/2025/03/GHSA-3jxr-23ph-c89g/GHSA-3jxr-23ph-c89g.json +++ b/advisories/github-reviewed/2025/03/GHSA-3jxr-23ph-c89g/GHSA-3jxr-23ph-c89g.json @@ -4,65 +4,31 @@ "modified": "2026-02-13T20:52:09Z", "published": "2025-03-04T18:33:43Z", "withdrawn": "2026-02-13T20:52:09Z", - "aliases": [], - "summary": "Duplicate Advisory: Wildfly Elytron integration susceptible to brute force attacks via CLI", - "details": "### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-qhp6-6p8p-2rqh. This link is maintained to preserve external references.\n\n### Original Description\nA flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.", - "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" - } - ], - "affected": [ - { - "package": { - "ecosystem": "Maven", - "name": "org.wildfly.core:wildfly-elytron-integration" - }, - "ranges": [ - { - "type": "ECOSYSTEM", - "events": [ - { - "introduced": "0" - }, - { - "last_affected": "27.0.0.Final" - } - ] - } - ] - } + + "aliases": [ + "GHSA-qhp6-6p8p-2rqh" ], + + "summary": "Withdrawn Advisory: Duplicate of GHSA-qhp6-6p8p-2rqh", + + "details": "This advisory has been withdrawn because it is a duplicate of GHSA-qhp6-6p8p-2rqh. This entry is preserved only for external references. Please refer to the original advisory for accurate and up‑to‑date information.", + + "severity": [], + + "affected": [], + "references": [ { "type": "ADVISORY", - "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23368" - }, - { - "type": "WEB", - "url": "https://access.redhat.com/security/cve/CVE-2025-23368" - }, - { - "type": "WEB", - "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2337621" - }, - { - "type": "PACKAGE", - "url": "https://github.com/wildfly/wildfly-core" - }, - { - "type": "WEB", - "url": "https://www.gruppotim.it/it/footer/red-team.html" + "url": "https://github.com/advisories/GHSA-qhp6-6p8p-2rqh" } ], + "database_specific": { - "cwe_ids": [ - "CWE-307" - ], - "severity": "HIGH", + "cwe_ids": [], + "severity": "NONE", "github_reviewed": true, "github_reviewed_at": "2025-03-04T21:57:26Z", "nvd_published_at": "2025-03-04T16:15:39Z" } -} \ No newline at end of file +}