CVSS 3.1
4.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NCVE-2021-20250
Medium (4.3) in redhat. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in org.jboss:jboss-ejb-client 4.0.39.
A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-11-01)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:jboss-ejb-client
- redhat:jboss_enterprise_application_platform_expansion_pack
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2259-h742-5vr4 | Maven | org.jboss:jboss-ejb-client | <4.0.39 | 4.0.39 |