Observable Discrepancy in Wildfly Elytron
Moderate severity
GitHub Reviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Package
Affected versions
<= 1.10.13
>= 1.11.0, <= 1.15.4
= 1.16.0
Patched versions
1.10.14
1.15.5
1.16.1
Description
Published by the National Vulnerability Database
Aug 5, 2021
Published to the GitHub Advisory Database
May 24, 2022
Reviewed
Jun 22, 2022
Last updated
Jan 27, 2023
A flaw was found in Wildfly Elytron where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality. This flaw affectes Wildfly Elytron versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final.
References