CVE-2021-3642
Assigner: redhat
Published: 2021-08-05T20:48:01
State: PUBLISHED
affected: product: wildfly-elytron
vendor: n/a
versions: status: affected
version: Wildfly Elytron 1.10.14.Final, Wildfly Elytron 1.15.5.Final, Wildfly Elytron 1.16.1.Final
descriptions: value: A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.
problemTypes: descriptions: cweId: CWE-203
description: CWE-203
type: CWE