There appears to be a typo in UndertowHttpManagementService.java where in its start method it has this code:

...
if(secureBindAddress != null) {
            ListenerRegistry.Listener https = new ListenerRegistry.Listener("https", HTTPS_MANAGEMENT, SERVER_NAME, bindAddress);
            ...
        }

Notice that it creates a Listener by passing it "bindAddress". This IMO is a typo and should instead pass the "secureBindAddress".

This isn't causing any visible issues right now since there appear to be no one who uses this value from the instantiated Listener (no calls to Listener.getBindAddress()).