CVE-2021-3717

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-3717
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3717.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-3717
Aliases
Related
Published
2022-05-24T19:15:09Z
Modified
2024-09-03T03:54:37.950687Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A flaw was found in Wildfly. An incorrect JBOSSLOCALUSER challenge location when using the elytron configuration may lead to JBOSSLOCALUSER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability. This flaw affects wildfly-core versions prior to 17.0.

References

Affected packages

Git / github.com/wildfly/wildfly-core

Affected ranges

Type
GIT
Repo
https://github.com/wildfly/wildfly-core
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
38f40e77f5284243a5f469faf7e7165b857aa68e

Affected versions

1.*

1.0.0.Alpha1
1.0.0.Alpha10
1.0.0.Alpha11
1.0.0.Alpha12
1.0.0.Alpha13
1.0.0.Alpha14
1.0.0.Alpha15
1.0.0.Alpha16
1.0.0.Alpha17
1.0.0.Alpha18
1.0.0.Alpha19
1.0.0.Alpha2
1.0.0.Alpha3
1.0.0.Alpha4
1.0.0.Alpha5
1.0.0.Alpha6
1.0.0.Alpha7
1.0.0.Alpha8
1.0.0.Alpha9
1.0.0.Beta1
1.0.0.Beta2
1.0.0.Beta3
1.0.0.Beta4
1.0.0.Beta5
1.0.0.Beta6
1.0.0.CR1

10.*

10.0.0.Beta1
10.0.0.Beta2
10.0.0.Beta3
10.0.0.Beta4
10.0.0.Beta5
10.0.0.Beta6
10.0.0.Beta7
10.0.0.Beta8
10.0.0.Beta9
10.0.0.CR1
10.0.0.Final

11.*

11.0.0.Beta1
11.0.0.Beta10
11.0.0.Beta2
11.0.0.Beta3
11.0.0.Beta4
11.0.0.Beta5
11.0.0.Beta6
11.0.0.Beta7
11.0.0.Beta8
11.0.0.Beta9
11.0.0.Final

12.*

12.0.0.Beta1
12.0.0.Beta2
12.0.0.Beta3
12.0.0.Beta4
12.0.0.Final
12.0.1.Final

13.*

13.0.0.Beta1
13.0.0.Beta2
13.0.0.Beta3
13.0.0.Beta4
13.0.0.Beta5
13.0.0.Beta6
13.0.0.Final
13.0.1.Final

14.*

14.0.0.Beta1
14.0.0.Beta2
14.0.0.Beta3
14.0.0.Beta4
14.0.0.Beta5
14.0.0.Final

15.*

15.0.0.Beta1
15.0.0.Final

16.*

16.0.0.Beta1
16.0.0.Beta2
16.0.0.Beta3
16.0.0.Beta4
16.0.0.Beta5
16.0.0.Final

17.*

17.0.0.Beta1
17.0.0.Beta2
17.0.0.Beta3
17.0.0.Beta4
17.0.0.Beta5
17.0.0.Beta6
17.0.0.Beta7

2.*

2.0.0.Alpha1
2.0.0.Alpha10
2.0.0.Alpha11
2.0.0.Alpha12
2.0.0.Alpha13
2.0.0.Alpha2
2.0.0.Alpha3
2.0.0.Alpha4
2.0.0.Alpha5
2.0.0.Alpha6
2.0.0.Alpha8
2.0.0.Alpha9
2.0.0.Beta1
2.0.0.Beta2
2.0.0.Beta3
2.0.0.Beta4
2.0.0.Beta5
2.0.0.Beta6
2.0.0.Beta7
2.0.0.CR1
2.0.0.CR2
2.0.0.CR3
2.0.0.CR4
2.0.0.CR5
2.0.0.CR6
2.0.0.CR7
2.0.0.CR8
2.0.0.CR9
2.0.0.Final
2.0.10.Final
2.0.2.Final
2.0.3.Final
2.0.4.Final
2.0.5.CR1
2.0.5.Final
2.0.6.Final
2.0.7.Final
2.0.8.Final
2.0.9.Final
2.1.0.CR1
2.1.0.CR2
2.1.0.Final

3.*

3.0.0.Alpha1
3.0.0.Alpha10
3.0.0.Alpha11
3.0.0.Alpha12
3.0.0.Alpha13
3.0.0.Alpha14
3.0.0.Alpha15
3.0.0.Alpha16
3.0.0.Alpha17
3.0.0.Alpha18
3.0.0.Alpha19
3.0.0.Alpha2
3.0.0.Alpha20
3.0.0.Alpha21
3.0.0.Alpha22
3.0.0.Alpha23
3.0.0.Alpha24
3.0.0.Alpha25
3.0.0.Alpha3
3.0.0.Alpha4
3.0.0.Alpha5
3.0.0.Alpha6
3.0.0.Alpha7
3.0.0.Alpha8
3.0.0.Alpha9
3.0.0.Beta1
3.0.0.Beta11
3.0.0.Beta12
3.0.0.Beta13
3.0.0.Beta14
3.0.0.Beta15
3.0.0.Beta16
3.0.0.Beta16-pre
3.0.0.Beta18
3.0.0.Beta19
3.0.0.Beta2
3.0.0.Beta20
3.0.0.Beta21
3.0.0.Beta22
3.0.0.Beta23
3.0.0.Beta24
3.0.0.Beta25
3.0.0.Beta26
3.0.0.Beta27
3.0.0.Beta28
3.0.0.Beta29
3.0.0.Beta3
3.0.0.Beta30
3.0.0.Beta31
3.0.0.Beta4
3.0.0.Beta5
3.0.0.Beta6
3.0.0.Beta7
3.0.0.Beta8
3.0.0.Beta9
3.0.0.CR1
3.0.0.Final

4.*

4.0.0.Alpha1
4.0.0.Alpha10
4.0.0.Alpha2
4.0.0.Alpha3
4.0.0.Alpha4
4.0.0.Alpha5
4.0.0.Alpha6
4.0.0.Alpha7
4.0.0.Alpha8
4.0.0.Alpha9
4.0.0.Beta1
4.0.0.Beta2
4.0.0.CR1
4.0.0.Final

5.*

5.0.0.Alpha1
5.0.0.Alpha2
5.0.0.Alpha3
5.0.0.Alpha4
5.0.0.Alpha5
5.0.0.Alpha6
5.0.0.Alpha7
5.0.0.Beta1
5.0.0.Beta2
5.0.0.Beta3
5.0.0.Beta4
5.0.0.Beta5
5.0.0.CR1
5.0.0.Final

6.*

6.0.0.Alpha1
6.0.0.Alpha2
6.0.0.Alpha3
6.0.0.Alpha4
6.0.0.Alpha5
6.0.0.Beta1
6.0.0.CR1
6.0.0.CR2
6.0.0.CR3
6.0.0.CR4
6.0.0.Final
6.0.1.Final
6.0.2.Final

7.*

7.0.0.Alpha1
7.0.0.Alpha2
7.0.0.Alpha4
7.0.0.Alpha5
7.0.0.Beta1
7.0.0.CR1
7.0.0.Final

8.*

8.0.0.Beta1
8.0.0.Beta2
8.0.0.Beta3
8.0.0.Beta4
8.0.0.Beta5
8.0.0.CR1
8.0.0.Final

9.*

9.0.0.Beta1
9.0.0.Beta2
9.0.0.Beta3
9.0.0.Beta4
9.0.0.Beta5
9.0.0.Beta6
9.0.0.Beta7
9.0.0.Final
9.0.1.Final