CVE-2021-3644
1 advisory.
Maven/org.wildfly.core:wildfly-server CVE-2021-3644: low 3.3, EPSS 0.98%
wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault
Action: Upgrade org.wildfly.core:wildfly-server to 16.0.1.Final (16.x) or 17.0.0.Beta3 (17.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 16.0.1.Final | - |
| 17.0.0.Beta2 | 17.0.0.Beta3 | - |
Fixed versions
| 16.0.1.Final | 17.0.0.Beta3 |
Sources
- osv: GHSA-w88m-2936-rmxr
- https://nvd.nist.gov/vuln/detail/CVE-2021-3644
- https://github.com/wildfly/wildfly-core/pull/4668
- https://github.com/wildfly/wildfly-core/commit/06dd9884f6ba50470b1fb5a35198a8784f037714
- https://github.com/wildfly/wildfly-core/commit/6d8db43cd43b5994b7a14003db978064e086090b
- https://access.redhat.com/security/cve/CVE-2021-3644
- https://bugzilla.redhat.com/show_bug.cgi?id=1976052
- https://github.com/wildfly/wildfly-core
- https://issues.redhat.com/browse/WFCORE-5511
CVE-2021-3644 · published · modified · JSON