GHSA-2259-h742-5vr4

Source

https://github.com/advisories/GHSA-2259-h742-5vr4

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-2259-h742-5vr4/GHSA-2259-h742-5vr4.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-2259-h742-5vr4

Aliases

CVE-2021-20250

Published

2022-05-24T19:02:23Z

Modified

2023-11-08T04:04:36.074772Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

JBoss EJB Client information disclosure vulnerability

Details

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.

Database specific

{
    "nvd_published_at": "2021-05-13T14:15:00Z",
    "github_reviewed_at": "2022-06-22T18:49:54Z",
    "severity": "MODERATE",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-200"
    ]
}

References

Affected packages

Maven / org.jboss:jboss-ejb-client

Package

Name: org.jboss:jboss-ejb-client; View open source insights on deps.dev
Purl: pkg:maven/org.jboss/jboss-ejb-client

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.39

Affected versions

1.*

1.0.0.Beta1

1.0.0.Beta2

1.0.0.Beta3

1.0.0.Beta4

1.0.0.Beta5

1.0.0.Beta6

1.0.0.Beta7

1.0.0.Beta8

1.0.0.Beta9

1.0.0.Beta10

1.0.0.Beta11

1.0.0.Beta12

1.0.0.Final

1.0.1.Final

1.0.2.Final

1.0.3.Final

1.0.4.Final

1.0.5.Final

1.0.6.CR1

1.0.6.Final

1.0.7.Final

1.0.8.Final

1.0.9.Final

1.0.10.Final

1.0.11.Final

1.0.12.Final

1.0.13.Final

1.0.14.Final

1.0.15.Final

1.0.16.Final

1.0.17.Final

1.0.18.Final

1.0.19.Final

1.0.20.Final

1.0.21.Final

1.0.22.Final

1.0.23.Final

1.0.24.Final

1.0.25.Final

1.0.26.Final

1.0.27.Final

1.0.28.Final

1.0.29.Final

1.0.30.Final

1.0.31.Final

1.0.32.Final

1.0.33.Final

1.0.34.Final

1.0.35.Final

1.0.36.Final

1.0.37.Final

1.0.38.Final

1.0.39.Final

1.0.40.Final

1.0.41.Final

1.1.0.Alpha1

2.*

2.0.0.Beta1

2.0.0.Beta2

2.0.0.Beta3

2.0.0.Beta4

2.0.0.Beta5

2.0.0.Final

2.0.1.Final

2.0.2.Final

2.0.3.Final

2.1.0.Final

2.1.1.Final

2.1.2.Final

2.1.3.Final

2.1.4.Final

2.1.5.Final

2.1.6.Final

2.1.7.Final

2.1.8.Final

3.*

3.0.0.Beta1

3.0.0.Beta2

3.0.0.Beta3

3.0.0.Beta4

3.0.0.Beta5

4.*

4.0.0.Beta1

4.0.0.Beta2

4.0.0.Beta3

4.0.0.Beta4

4.0.0.Beta5

4.0.0.Beta6

4.0.0.Beta7

4.0.0.Beta8

4.0.0.Beta9

4.0.0.Beta10

4.0.0.Beta11

4.0.0.Beta12

4.0.0.Beta13

4.0.0.Beta14

4.0.0.Beta15

4.0.0.Beta16

4.0.0.Beta17

4.0.0.Beta18

4.0.0.Beta19

4.0.0.Beta20

4.0.0.Beta21

4.0.0.Beta22

4.0.0.Beta23

4.0.0.Beta24

4.0.0.Beta25

4.0.0.Beta25-jbossorg-1

4.0.0.Beta26

4.0.0.Beta27

4.0.0.Beta28

4.0.0.Beta29

4.0.0.Beta30

4.0.0.Beta31

4.0.0.CR1

4.0.0.CR2

4.0.0.CR3

4.0.0.CR4

4.0.0.CR5

4.0.0.CR6

4.0.0.CR7

4.0.0.Final

4.0.1.Final

4.0.2.Final

4.0.3.Final

4.0.4.Final

4.0.5.Final

4.0.6.Final

4.0.7.Final

4.0.8.Final

4.0.9.Final

4.0.10.Final

4.0.11.Final

4.0.12.Final

4.0.13.Final

4.0.14.Final

4.0.15.Final

4.0.16.Final

4.0.17.Final

4.0.18.Final

4.0.19.Final

4.0.20.Final

4.0.21.Final

4.0.22.Final

4.0.23.Final

4.0.24.Final

4.0.25.Final

4.0.26.Final

4.0.27.Final

4.0.28.Final

4.0.29.Final

4.0.30.Final

4.0.31.Final

4.0.32.Final

4.0.33.Final

4.0.34.Final

4.0.35.Final

4.0.36.Final

4.0.37.Final

4.0.38.Final

Database specific

{
    "last_known_affected_version_range": "<= 4.0.38"
}