Description

A flaw was found in Wildfly Elytron where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality. This flaw affectes Wildfly Elytron versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final.

Remediation

References

CVE-2021-3642

Related Vulnerabilities

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-5114)

Sqlite Use After Free Vulnerability (CVE-2020-13630)

Joomla! Core 1.0.x Unspecified Vulnerability (1.0.0 - 1.0.3)

WordPress Plugin WP Safe Search 'v1' Parameter Cross-Site Scripting (0.7)

Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7818)

Severity

Medium

Classification

CVE-2021-3642 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities