GitHub Advisoryadvisory · Maven
GHSA-c4r5-xvgw-2942 Metrics exposure in Wildfly
MEDIUM
Official page ↗
- Aliases
- CVE-2021-3503
- Ecosystem
- Maven
- Packages
- org.wildfly:wildfly-metrics
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-200
- Reviewed
- 2022-04-28
Affected packages
• Maven org.wildfly:wildfly-metrics: < 23.0.1.Final → fixed in 23.0.1.Final
Description
A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data.
Related
Alias · CVE (1)
- CVE-2021-3503 A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. vulnerability
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-3503 advisory
- https://github.com/wildfly/wildfly/pull/14136 web
- https://access.redhat.com/security/cve/CVE-2021-3503 web
- https://bugzilla.redhat.com/show_bug.cgi?id=1942693 web
- https://github.com/advisories/GHSA-c4r5-xvgw-2942 advisory
- https://github.com/wildfly/wildfly package
- https://issues.redhat.com/browse/WFLY-11933 web
- https://security.netapp.com/advisory/ntap-20220609-0004 web