CVE-2021-3642
MEDIUM5.3EPSS 0.27%Observable Discrepancy in Wildfly Elytron
發布日:2022/5/24修改日:2023/11/8
描述
A flaw was found in Wildfly Elytron where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality. This flaw affectes Wildfly Elytron versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final.
受影響套件(1)
- Maven/org.wildfly.security:wildfly-elytronfrom 0, < 1.10.14
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM5.3 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N |