org.wildfly:wildfly-batch (>=9.0.0.beta1, <=9.0.0.cr1), org.wildfly:wildfly-batch-parent (>=9.0.0.beta1, <=9.0.0.cr1) +21 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.3.final)

org.jboss:jboss-ejb-client MAVEN version 2.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-batch =9.0.0.beta1, =9.0.0.beta1, =9.0.0.beta1, =9.0.0.beta1, =9.0.0.beta1,...

org.wildfly:wildfly-client-all (9.0.0.alpha1), org.wildfly:wildfly-clustering-ejb-spi (>=8.1.0.cr1, <=9.0.0.alpha1) +2 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.1.final)

org.jboss:jboss-ejb-client MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-client-all 9.0.0.alpha1 - org.wildfly:wildfly-clustering-ejb-spi =8.1.0.cr1,...

org.wildfly:wildfly-ee (8.0.0.alpha1), org.wildfly:wildfly-ejb-client-bom (8.0.0.alpha1) +8 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.21.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.21.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-ee 8.0.0.alpha1 - org.wildfly:wildfly-ejb-client-bom 8.0.0.alpha1 -...

com.logitags:cibet-integrationtest (>=2.2, <=2.2.2), org.fakereplace:fakereplace-wildfly-tests (1.0.0.alpha3) +25 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.1.1.final)

org.jboss:jboss-ejb-client MAVEN version 2.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - com.logitags:cibet-integrationtest =2.2, =8.0.0.beta2, =8.0.0.beta1, =8.0.0.beta2, =9.0.0.cr2,...

org.jboss.ws.cxf:jbossws-cxf-test-utils (>=5.1.6.final, <=5.3.0.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (3.0.0.beta3)

org.jboss:jboss-ejb-client MAVEN version 3.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss.ws.cxf:jbossws-cxf-test-utils =5.1.6.final, =5.3.0.final Source cves: CVE-2021-20250 Source...

org.fakereplace:fakereplace-wildfly-tests (>=1.0.0.alpha6, <=1.0.0.alpha7), org.wildfly.bom:ejb-client-bom (>=13.0.0.alpha1, <=13.0.0.final) +5 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (>=4.0.0.beta16, <=4.0.37.final)

org.jboss:jboss-ejb-client MAVEN version =4.0.0.beta16, =1.0.0.alpha6, =13.0.0.alpha1, =1.0.0.alpha2, =11.0.0.alpha1, =11.0.0.alpha1, =11.0.0.alpha1, =11.0.0.alpha1, =22.0.1.final Source cves: CVE-2021-20250 Source advisory: OSV:GHSA-2259-H742-5VR4...

org.javafxdata:datafx-ejb-wildfly (8.0b1), org.javafxdata:datafx-samples (8.0b1) +25 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.0.beta5)

org.jboss:jboss-ejb-client MAVEN version 2.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.javafxdata:datafx-ejb-wildfly 8.0b1 - org.javafxdata:datafx-samples 8.0b1 -...

org.infinispan.server:infinispan-server-commons (>=8.1.0.beta1, <=8.2.0.beta1), org.infinispan.server:infinispan-server-infinispan (>=8.1.0.beta1, <=8.2.0.beta1) +29 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.1.3.final)

org.jboss:jboss-ejb-client MAVEN version 2.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.infinispan.server:infinispan-server-commons =8.1.0.beta1, =8.1.0.beta1, =8.1.0.beta1, =10.0.0.cr4...

org.wildfly:wildfly-ee (8.0.0.alpha2), org.wildfly:wildfly-ejb-client-bom (8.0.0.alpha2) +8 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.22.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.22.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-ee 8.0.0.alpha2 - org.wildfly:wildfly-ejb-client-bom 8.0.0.alpha2 -...

CVE-2021-20250

CVE-2021-20250 affects WildFly/JBoss EJB client. The issue is that privileged actions exposed by the JBoss EJB client can be publicly accessible, potentially allowing information disclosure on the server. According to the data, the exploit involves network access with low attack complexity, requi...

CVE-2021-20250

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.3.6 (RHSA-2021:0874)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0874 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2021-20250

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality...