CVE-2021-3503

Katalog CVE

CVSS 4.3 · Medium EPSS 1,1%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada redhat wildfly. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat from this vulnerability is to the confidentiality.

Rincian

Terbit di NVD

18 April 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 64,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2021-3503 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1942693 issue tracking · advisory vendor
• https://issues.redhat.com/browse/WFLY-11933 advisory vendor
• https://github.com/wildfly/wildfly/pull/14136 patch · advisory pihak ketiga
• https://github.com/advisories/GHSA-c4r5-xvgw-2942 advisory pihak ketiga