En bref
- CVE-2021-20250 est une vulnérabilité MOYENNE (CVSS 4.3) touchant org.jboss:jboss-ejb-client, jboss-ejb-client (redhat).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.74%, plus élevée que 54.7% des vulnérabilités.
- Correctif : mettre à jour vers 4.0.39 ou plus récent.
Description
A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.
NVD description
A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.
Autres vulnérabilités de org.jboss:jboss-ejb-client
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free