CVE-2021-3717

published 2022-05-24

CVE-2021-3717: A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER access to all…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability. This flaw affects wildfly-core versions prior to 17.0.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
redhat	jboss_enterprise_application_platform	—	—
redhat	jboss_enterprise_application_platform	—	—
redhat	wildfly_core	< 17.0	17.0
redhat	wildfly_core	—	—

CWE-552