A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5151 advisory.

  - undertow: potential security issue in flow control over HTTP/2 may lead to DOS (CVE-2021-3629)

  - wildfly-elytron: possible timing attack in ScramServer (CVE-2021-3642)

  - wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users     (CVE-2021-3717)

  - resteasy: Error message exposes endpoint class information (CVE-2021-20289)

  - jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck (CVE-2021-37714)

  - xml-security: XPath Transform abuse allows for information disclosure (CVE-2021-40690)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5149 advisory.

  - undertow: potential security issue in flow control over HTTP/2 may lead to DOS (CVE-2021-3629)

  - wildfly-elytron: possible timing attack in ScramServer (CVE-2021-3642)

  - wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users     (CVE-2021-3717)

  - resteasy: Error message exposes endpoint class information (CVE-2021-20289)

  - jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck (CVE-2021-37714)

  - xml-security: XPath Transform abuse allows for information disclosure (CVE-2021-40690)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5150 advisory.

  - undertow: potential security issue in flow control over HTTP/2 may lead to DOS (CVE-2021-3629)

  - wildfly-elytron: possible timing attack in ScramServer (CVE-2021-3642)

  - wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users     (CVE-2021-3717)

  - resteasy: Error message exposes endpoint class information (CVE-2021-20289)

  - jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck (CVE-2021-37714)

  - xml-security: XPath Transform abuse allows for information disclosure (CVE-2021-40690)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3656 advisory.

  - velocity: arbitrary code execution when attacker is able to modify templates (CVE-2020-13936)

  - netty: possible request smuggling in HTTP/2 due missing validation (CVE-2021-21295)

  - netty: Request smuggling via content-length header (CVE-2021-21409)

  - jakarta-el: ELParserTokenManager enables invalid EL expressions to be evaluate (CVE-2021-28170)

  - apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 (CVE-2021-29425)

  - wildfly: XSS via admin console when creating roles in domain mode (CVE-2021-3536)

  - undertow: HTTP2SourceChannel fails to write final frame under some circumstances may lead to DoS     (CVE-2021-3597)

  - wildfly-elytron: possible timing attack in ScramServer (CVE-2021-3642)

  - wildfly-core: Invalid Sensitivity Classification of Vault Expression (CVE-2021-3644)

  - undertow: buffer leak on incoming websocket PONG message may lead to DoS (CVE-2021-3690)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3658 advisory.

  - velocity: arbitrary code execution when attacker is able to modify templates (CVE-2020-13936)

  - netty: possible request smuggling in HTTP/2 due missing validation (CVE-2021-21295)

  - netty: Request smuggling via content-length header (CVE-2021-21409)

  - jakarta-el: ELParserTokenManager enables invalid EL expressions to be evaluate (CVE-2021-28170)

  - apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 (CVE-2021-29425)

  - wildfly: XSS via admin console when creating roles in domain mode (CVE-2021-3536)

  - undertow: HTTP2SourceChannel fails to write final frame under some circumstances may lead to DoS     (CVE-2021-3597)

  - wildfly-elytron: possible timing attack in ScramServer (CVE-2021-3642)

  - wildfly-core: Invalid Sensitivity Classification of Vault Expression (CVE-2021-3644)

  - undertow: buffer leak on incoming websocket PONG message may lead to DoS (CVE-2021-3690)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
156111	RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 8 (Moderate) (RHSA-2021:5151)	Nessus	Red Hat Local Security Checks	high
156109	RHEL 6 : Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 6 (Moderate) (RHSA-2021:5149)	Nessus	Red Hat Local Security Checks	high
156106	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 7 (Moderate) (RHSA-2021:5150)	Nessus	Red Hat Local Security Checks	high
153835	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.1 security update on RHEL 7 (Important) (RHSA-2021:3656)	Nessus	Red Hat Local Security Checks	high
153832	RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.1 security update on RHEL 8 (Important) (RHSA-2021:3658)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2021-3642

medium

Tenable Plugins

high

high

high

high

high