← Database
CVE-2021-3642
MEDIUM
CVSS: 5.3
Published: 2021-08-05
Modified: 2026-06-17
Description
A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.
Affected Platforms
Redhat Wildfly ElytronRedhat Jboss FuseRedhat Openshift Application RuntimesQuarkus QuarkusRedhat Process AutomationRedhat Integration Camel KRedhat Integration Camel QuarkusRedhat Jboss Enterprise Application Platform Expansion PackRedhat Data GridRedhat Descision Manager
Weakness Type
CWE-203, CWE-203