Description

A flaw was found in Wildfly Elytron where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality. This flaw affectes Wildfly Elytron versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final.

Remediation

References

CVE-2021-3642

Related Vulnerabilities

e107 Other Vulnerability (CVE-2006-0682)

MySQL CVE-2018-2586 Vulnerability (CVE-2018-2586)

WordPress Plugin W3 Total Cache Server-Side Request Forgery (0.9.7.3)

MongoDb Improper Input Validation Vulnerability (CVE-2020-7925)

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-16893)

Severity

Medium

Classification

CVE-2021-3642 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities