PT-2022-10386 · Wildfly · Wildfly

Pedro Sampaio · Published 2022-04-18 · Updated 2024-03-06 · CVE-2021-3503

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Wildfly (affected versions not specified)

Description A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat from this vulnerability is to the confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BIT-WILDFLY-2021-3503

CVE-2021-3503

GHSA-C4R5-XVGW-2942

Affected Products

Wildfly

References · 12

• https://github.com/wildfly/wildfly/pull/14136 · Patch
• https://osv.dev/vulnerability/BIT-wildfly-2021-3503 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3503 · Security Note
• https://osv.dev/vulnerability/GHSA-c4r5-xvgw-2942 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3503 · Vendor Advisory
• https://issues.redhat.com/browse/WFLY-11933 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2021-3503 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1942693 · Vendor Advisory
• https://github.com/wildfly/wildfly · Note
• https://github.com/advisories/GHSA-c4r5-xvgw-2942 · Note
• https://security.netapp.com/advisory/ntap-20220609-0004 · Note
• https://t.me/cibsecurity/41045 · Telegram Post