PT-2021-13857 · Red Hat · Jboss Ejb

Kunjan Rathod · Published 2021-05-13 · Updated 2022-08-05 · CVE-2021-20250

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Wildfly (affected versions not specified)

Description: A flaw was found in the JBoss EJB client, which has publicly accessible privileged actions. This may lead to information disclosure on the server it is deployed on, with the highest threat being to data confidentiality.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2021-20250

GHSA-2259-H742-5VR4

RHSA-2021:0872

RHSA-2021:0873

RHSA-2021:0874

Affected Products

Jboss Ejb

References · 5

• https://osv.dev/vulnerability/GHSA-2259-h742-5vr4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20250 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1929479 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-20250 · Vendor Advisory
• https://t.me/cvenotify/14389 · Telegram Post