Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2259-h742-5vr4

Опубликовано: 24 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 4.3

Описание

JBoss EJB Client information disclosure vulnerability

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.

Пакеты

Наименование

org.jboss:jboss-ejb-client

maven
Затронутые версииВерсия исправления

<= 4.0.38

4.0.39

EPSS

Процентиль: 39%
0.00171
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.3
redhat
больше 4 лет назад

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.

CVSS3: 4.3
nvd
около 4 лет назад

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.

CVSS3: 4.3
debian
около 4 лет назад

A flaw was found in wildfly. The JBoss EJB client has publicly accessi ...

EPSS

Процентиль: 39%
0.00171
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200