CVE-2021-3717

Name of the Vulnerable Software and Affected Versions Wildfly versions prior to 17.0

Description A flaw was found in Wildfly, where an incorrect JBOSS LOCAL USER challenge location when using the elytron configuration may lead to JBOSS LOCAL USER access to all users on the machine. The highest threat from this issue is to confidentiality, integrity, and availability.

Recommendations For versions prior to 17.0, update to version 17.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the elytron configuration to minimize the risk of exploitation.