CVE-2021-20250

2021-05-1313:35:25

CWE-200

redhat

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.

CNA Affected

[
  {
    "product": "wildfly",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "jboss-ejb-client 4.0.39"
      }
    ]
  }
]