JBoss EJB Client information disclosure vulnerability

2022-05-2419:02:23

Google

osv.dev

0.001 Low

EPSS

Percentile

22.7%

JSON

A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.

CPENameOperatorVersion
org.jboss:jboss-ejb-clienteq4.0.0.Beta10
org.jboss:jboss-ejb-clienteq4.0.0.Beta27
org.jboss:jboss-ejb-clienteq1.0.30.Final
org.jboss:jboss-ejb-clienteq4.0.26.Final
org.jboss:jboss-ejb-clienteq4.0.0.Beta4
org.jboss:jboss-ejb-clienteq1.0.2.Final
org.jboss:jboss-ejb-clienteq2.0.0.Beta5
org.jboss:jboss-ejb-clienteq4.0.17.Final
org.jboss:jboss-ejb-clienteq4.0.0.Beta9
org.jboss:jboss-ejb-clienteq4.0.0.CR1

Name	Operator	Version
org.jboss:jboss-ejb-client	eq	4.0.0.Beta10
org.jboss:jboss-ejb-client	eq	4.0.0.Beta27
org.jboss:jboss-ejb-client	eq	1.0.30.Final
org.jboss:jboss-ejb-client	eq	4.0.26.Final
org.jboss:jboss-ejb-client	eq	4.0.0.Beta4
org.jboss:jboss-ejb-client	eq	1.0.2.Final
org.jboss:jboss-ejb-client	eq	2.0.0.Beta5
org.jboss:jboss-ejb-client	eq	4.0.17.Final
org.jboss:jboss-ejb-client	eq	4.0.0.Beta9
org.jboss:jboss-ejb-client	eq	4.0.0.CR1