CVE-2021-3717

🗓️ 24 May 2022 18:18:43Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 273 Views

Flaw in Wildfly, elytron config allows JBOSS_LOCAL_USER access to all users. Affects wildfly-core < 17.

Reporter	Title	Published	Views	Family All 48
ATTACKERKB	CVE-2021-3717	24 May 202219:15	–	attackerkb
Circl	CVE-2021-3717	24 May 202222:37	–	circl
CNNVD	Wildfly 安全漏洞	18 Aug 202100:00	–	cnnvd
Cvelist	CVE-2021-3717	24 May 202218:18	–	cvelist
EUVD	EUVD-2022-4736	3 Oct 202520:07	–	euvd
Github Security Blog	Wildfly-Core user account mismanagement	25 May 202200:00	–	github
NCSC	Vulnerabilities fixed in JBoss Enterprise Application Platform	16 Dec 202100:00	–	ncsc
NVD	CVE-2021-3717	24 May 202219:15	–	nvd
OSV	GHSA-P9XF-3RM3-QH2H Wildfly-Core user account mismanagement	25 May 202200:00	–	osv
OSV	RHSA-2021:4676 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 7	20 Sep 202415:04	–	osv

NVD

Vulners

Node

redhat jboss_enterprise_application_platformMatch-text-only

redhat single_sign-onMatch-text-only

redhat wildfly_coreRange<17.0

Node

redhat jboss_enterprise_application_platformMatch7.4

AND

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

Node

redhat jboss_enterprise_application_platformMatch7.3

AND

redhat enterprise_linuxMatch6.0

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

[
  {
    "product": "wildfly",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "wildfly-core 17.0"
      }
    ]
  }
]