CVE-2021-3503

State: Published
Severity: Not scored
Published: Apr 18, 2022
Updated: Aug 3, 2024
Reserved: Apr 16, 2021

Description

A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat from this vulnerability is to the confidentiality.

Scores

The record has no CVSS score.

Weaknesses

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

Product	Versions
wildflyn/a	Fixed in 23.0.1.FinalAffected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1942693
https://issues.redhat.com/browse/WFLY-11933
https://github.com/wildfly/wildfly/pull/14136
https://github.com/advisories/GHSA-c4r5-xvgw-2942
https://access.redhat.com/security/cve/CVE-2021-3503

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.