CVE-2021-3644
Low
Description
A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity.
SeverityLow
CVSS3.3
Exploit probability—
Product
Redhat Wildfly
PublishedAug 26, 2022
First seenAug 26, 2022
Weakness typeCWE-200Sensitive information exposure
How to fix
Update
- org.wildfly.core:wildfly-server16.0.1.Final, 17.0.0.Beta3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat wildfly | 16.0.0, 17.0.0 | — |
| redhat descision_manager | 7.0 | — |
| org.wildfly.core:wildfly-serverMaven | v < 16.0.1.Final, 17.0.0.Beta2 ≤ v < 17.0.0.Beta3 | 16.0.1.Final, 17.0.0.Beta3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.