A path‑traversal flaw exists in WildFly’s take‑snapshot operation (CWE‑22). The flaw can be triggered by an attacker who holds the Monitor role, the lowest RBAC role. By manipulating the name parameter, the attacker can cause WildFly to write a copy of the full server configuration to an arbitrary location, effectively leaking the configuration file. The exposed data contains sensitive credentials and other confidential settings that are normally protected by RBAC. This results in information disclosure that could enable further compromise of the system.

Red Hat products impacted by this vulnerability include WildFly deployments on Red Hat Enterprise Linux 8 and 9, Red Hat Fuse 7, Red Hat JBoss Enterprise Application Platform 7 and 8, and Red Hat Single Sign‑On 7. These are all components that run the WildFly application server and expose the management API that the take‑snapshot operation is part of.

The CVSS score of 7.1 indicates a high impact for confidentiality with a medium to high exploitation complexity. The EPSS score of < 1% highlights a very low likelihood of exploitation, and the vulnerability is not listed in CISA KEV, suggesting no actively exploited variants are known. An attacker needs only the Monitor role, which is often granted to users with minimal privileges. If the management interface is exposed to the network, the attack can be performed remotely; otherwise it requires local access to the host. Because the exposed data includes credentials, the potential damage is significant.