Description
An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.
Remediation
References
Related Vulnerabilities
WordPress Plugin Themify Builder Cross-Site Scripting (5.3.1)
Liferay Portal Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-43825)
WordPress 3.7.3 Multiple Vulnerabilities (3.7 - 3.7.3)
WordPress Plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Scripting (1.1.1.11)