CVE - CVE-2021-3644

CVE-ID
CVE-2021-3644	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://access.redhat.com/security/cve/CVE-2021-3644 URL:https://access.redhat.com/security/cve/CVE-2021-3644 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1976052 URL:https://bugzilla.redhat.com/show_bug.cgi?id=1976052 MISC:https://github.com/wildfly/wildfly-core/commit/06dd9884f6ba50470b1fb5a35198a8784f037714 URL:https://github.com/wildfly/wildfly-core/commit/06dd9884f6ba50470b1fb5a35198a8784f037714 MISC:https://github.com/wildfly/wildfly-core/commit/6d8db43cd43b5994b7a14003db978064e086090b URL:https://github.com/wildfly/wildfly-core/commit/6d8db43cd43b5994b7a14003db978064e086090b MISC:https://github.com/wildfly/wildfly-core/pull/4668 URL:https://github.com/wildfly/wildfly-core/pull/4668 MISC:https://issues.redhat.com/browse/WFCORE-5511 URL:https://issues.redhat.com/browse/WFCORE-5511
Assigning CNA
Red Hat, Inc.
Date Record Created
20210714	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20210714)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)