Description

A flaw was found in Wildfly Elytron where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality. This flaw affectes Wildfly Elytron versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final.

Remediation

References

CVE-2021-3642

Related Vulnerabilities

Squid Integer Overflow or Wraparound Vulnerability (CVE-2020-11945)

WordPress Plugin Data Tables Generator by Supsystic Multiple Vulnerabilities (1.9.91)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6102)

WeBid Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11592)

TYPO3 Deserialization of Untrusted Data Vulnerability (CVE-2019-19849)

Severity

Medium

Classification

CVE-2021-3642 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities