CVE-2021-3644

Katalog CVE

CVSS 3.3 · Low EPSS 0,96%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada redhat descision manager, redhat wildfly. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity.

Rincian

Terbit di NVD

26 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,96% peluang dieksploitasi; lebih tinggi dari 60,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2021-3644 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1976052 issue tracking · advisory vendor
• https://issues.redhat.com/browse/WFCORE-5511 patch · advisory vendor
• https://github.com/wildfly/wildfly-core/commit/06dd9884f6ba50470b1fb5a35198a8784f037714 patch · advisory pihak ketiga
• https://github.com/wildfly/wildfly-core/commit/6d8db43cd43b5994b7a14003db978064e086090b patch · advisory pihak ketiga
• https://github.com/wildfly/wildfly-core/pull/4668 patch · advisory pihak ketiga