Published: 05/08/2021 Updated: 20/10/2021

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 5.3 | Impact Score: 3.6 | Exploitability Score: 1.6

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N

A flaw was found in Wildfly Elytron in versions before 1.10.14.Final, before 1.15.5.Final and before 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat wildfly elytron
redhat build of quarkus -
redhat codeready studio 12.0
redhat data grid 8.0
redhat descision manager 7.0
redhat integration camel k -
redhat integration camel quarkus
redhat jboss enterprise application platform 7.0.0
redhat jboss enterprise application platform expansion pack -
redhat jboss fuse 7.0.0
redhat openshift application runtimes -
redhat process automation 7.0
quarkus quarkus

Synopsis Important: Red Hat support for Spring Boot 2510 update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat OpenShift Application RuntimesRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, which gives a ...

Synopsis Moderate: Red Hat Data Grid 830 security update Type/Severity Security Advisory: Moderate Topic An update for Red Hat Data Grid is now availableRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is ...

Synopsis Important: Red Hat Fuse 7110 release and security update Type/Severity Security Advisory: Important Topic A minor version update (from 710 to 711) is now available for Red Hat Fuse The purpose of this text-only errata is to inform you about the security issues fixed in this releaseRed Hat Product Security has rated this update ...

Synopsis Moderate: Red Hat Process Automation Manager 7130 security update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat Process Automation ManagerRed Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring System (CVSS) base score, which gives a ...

No description is available for this CVE ...

CWE-203 https://bugzilla.redhat.com/show_bug.cgi?id=1981407 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2022:1179 https://access.redhat.com/security/cve/cve-2021-3642

CVE-2021-3642

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect