GHSA-2259-h742-5vr4

Suggest an improvement
Source
https://github.com/advisories/GHSA-2259-h742-5vr4
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-2259-h742-5vr4/GHSA-2259-h742-5vr4.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-2259-h742-5vr4
Aliases
Published
2022-05-24T19:02:23Z
Modified
2023-11-08T04:04:36.074772Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
JBoss EJB Client information disclosure vulnerability
Details

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.

References

Affected packages

Maven / org.jboss:jboss-ejb-client

Package

Name
org.jboss:jboss-ejb-client
View open source insights on deps.dev
Purl
pkg:maven/org.jboss/jboss-ejb-client

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.0.39

Affected versions

1.*

1.0.0.Beta1
1.0.0.Beta2
1.0.0.Beta3
1.0.0.Beta4
1.0.0.Beta5
1.0.0.Beta6
1.0.0.Beta7
1.0.0.Beta8
1.0.0.Beta9
1.0.0.Beta10
1.0.0.Beta11
1.0.0.Beta12
1.0.0.Final
1.0.1.Final
1.0.2.Final
1.0.3.Final
1.0.4.Final
1.0.5.Final
1.0.6.CR1
1.0.6.Final
1.0.7.Final
1.0.8.Final
1.0.9.Final
1.0.10.Final
1.0.11.Final
1.0.12.Final
1.0.13.Final
1.0.14.Final
1.0.15.Final
1.0.16.Final
1.0.17.Final
1.0.18.Final
1.0.19.Final
1.0.20.Final
1.0.21.Final
1.0.22.Final
1.0.23.Final
1.0.24.Final
1.0.25.Final
1.0.26.Final
1.0.27.Final
1.0.28.Final
1.0.29.Final
1.0.30.Final
1.0.31.Final
1.0.32.Final
1.0.33.Final
1.0.34.Final
1.0.35.Final
1.0.36.Final
1.0.37.Final
1.0.38.Final
1.0.39.Final
1.0.40.Final
1.0.41.Final
1.1.0.Alpha1

2.*

2.0.0.Beta1
2.0.0.Beta2
2.0.0.Beta3
2.0.0.Beta4
2.0.0.Beta5
2.0.0.Final
2.0.1.Final
2.0.2.Final
2.0.3.Final
2.1.0.Final
2.1.1.Final
2.1.2.Final
2.1.3.Final
2.1.4.Final
2.1.5.Final
2.1.6.Final
2.1.7.Final
2.1.8.Final

3.*

3.0.0.Beta1
3.0.0.Beta2
3.0.0.Beta3
3.0.0.Beta4
3.0.0.Beta5

4.*

4.0.0.Beta1
4.0.0.Beta2
4.0.0.Beta3
4.0.0.Beta4
4.0.0.Beta5
4.0.0.Beta6
4.0.0.Beta7
4.0.0.Beta8
4.0.0.Beta9
4.0.0.Beta10
4.0.0.Beta11
4.0.0.Beta12
4.0.0.Beta13
4.0.0.Beta14
4.0.0.Beta15
4.0.0.Beta16
4.0.0.Beta17
4.0.0.Beta18
4.0.0.Beta19
4.0.0.Beta20
4.0.0.Beta21
4.0.0.Beta22
4.0.0.Beta23
4.0.0.Beta24
4.0.0.Beta25
4.0.0.Beta25-jbossorg-1
4.0.0.Beta26
4.0.0.Beta27
4.0.0.Beta28
4.0.0.Beta29
4.0.0.Beta30
4.0.0.Beta31
4.0.0.CR1
4.0.0.CR2
4.0.0.CR3
4.0.0.CR4
4.0.0.CR5
4.0.0.CR6
4.0.0.CR7
4.0.0.Final
4.0.1.Final
4.0.2.Final
4.0.3.Final
4.0.4.Final
4.0.5.Final
4.0.6.Final
4.0.7.Final
4.0.8.Final
4.0.9.Final
4.0.10.Final
4.0.11.Final
4.0.12.Final
4.0.13.Final
4.0.14.Final
4.0.15.Final
4.0.16.Final
4.0.17.Final
4.0.18.Final
4.0.19.Final
4.0.20.Final
4.0.21.Final
4.0.22.Final
4.0.23.Final
4.0.24.Final
4.0.25.Final
4.0.26.Final
4.0.27.Final
4.0.28.Final
4.0.29.Final
4.0.30.Final
4.0.31.Final
4.0.32.Final
4.0.33.Final
4.0.34.Final
4.0.35.Final
4.0.36.Final
4.0.37.Final
4.0.38.Final

Database specific

{
    "last_known_affected_version_range": "<= 4.0.38"
}