CVE-2025-23368: Red Hat Data Grid

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.

Affected products

• Red Hat Data Grid: version 8.0 only
• Red Hat JBoss Enterprise Application Platform: version 7.0.0 only; version 8.0.0 only
• Red Hat Wildfly Core: before 31.0.3 (fixed in 31.0.3)

Published 2025-03-04. Last modified 2026-09-14.