CVE-2021-3503

EUVD-2022-1702
A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat from this vulnerability is to the confidentiality.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
Affected Products (NVD)
VendorProductVersion
redhatwildfly
𝑥
< 23.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/CVE-2021-3503
https://bugzilla.redhat.com/show_bug.cgi?id=1942693
https://github.com/advisories/GHSA-c4r5-xvgw-2942
https://github.com/wildfly/wildfly/pull/14136
https://issues.redhat.com/browse/WFLY-11933
https://access.redhat.com/security/cve/CVE-2021-3503
https://bugzilla.redhat.com/show_bug.cgi?id=1942693
https://github.com/advisories/GHSA-c4r5-xvgw-2942
https://github.com/wildfly/wildfly/pull/14136
https://issues.redhat.com/browse/WFLY-11933