Not rated
CVE-2021-3717 A flaw was found in Wildfly
Description
A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability. This flaw affects wildfly-core versions prior to 17.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wildfly | Versions not published |
Other CVEs of Wildfly
The 13 CVEs of Wildfly →
CVE-2022-1278
A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload…
Not rated
CVE-2022-0866
This is a concurrency issue that can result in the wrong caller principal being returned from the session context of…
Not rated
CVE-2021-3503
A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data
Not rated
CVE-2020-1719
A flaw was found in wildfly
Not rated