CVE-2021-20250
published 2021-05-13CVE-2021-20250: A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is…
PriorityP420medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.74%
50.9th percentile
A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | jboss-ejb-client | < 4.0.39 | 4.0.39 |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
JBoss EJB Client information disclosure vulnerability
ghsa·2022-05-24
CVE-2021-20250 [MEDIUM] CWE-200 JBoss EJB Client information disclosure vulnerability
JBoss EJB Client information disclosure vulnerability
A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.
OSV
JBoss EJB Client information disclosure vulnerability
osv·2022-05-24
CVE-2021-20250 [MEDIUM] JBoss EJB Client information disclosure vulnerability
JBoss EJB Client information disclosure vulnerability
A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.
Red Hat
wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client
vendor_redhat·2021-02-17·CVSS 4.3
CVE-2021-20250 [MEDIUM] CWE-200 wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client
wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client
A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.
A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.
Package: jboss-ejb-client (Red Hat Decision Manager 7) - Not affected
Package: jboss-ejb-client (Red Hat Fuse 7) - Not affected
Package: jboss-ejb-client (Red Hat JBoss Data Grid 7) - Out of support scope
Package: jboss-
No detection rules found.
No public exploits indexed.
2021-05-13
Published