Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-3503 BIT-wildfly-2021-3503EUVD-2022-1702GHSA-c4r5-xvgw-2942

Metrics exposure in Wildfly

Published Apr 18, 2022 · Updated Aug 3, 2024 · Assigned by redhat

Description

A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat from this vulnerability is to the confidentiality.

Affected products

VendorProductAffectedFixed
— wildfly Fixed in 23.0.1.Final —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.wildfly:wildfly-metrics < 23.0.1.Final 23.0.1.Final GHSA-c4r5-xvgw-2942

References