Attackers can see deployment names, endpoints, and any other data the trace payload may contain. Reference: https://issues.redhat.com/browse/WFLY-16238
Created jandex-maven-plugin tracking bugs for this issue: Affects: epel-all [bug 2128223] Created wildfly-common tracking bugs for this issue: Affects: epel-all [bug 2128224]
This issue has been addressed in the following products: AMQ Broker 7.11.0 Via RHSA-2023:1661 https://access.redhat.com/errata/RHSA-2023:1661
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2022-1278
This issue has been addressed in the following products: EAPXP 4.0.0 GA on EAP 7.4.10 Via RHSA-2023:1855 https://access.redhat.com/errata/RHSA-2023:1855