Files or Directories Accessible to External Parties in Wildfly Core - CVE-2021-3717

Vulnerability identifier: #VU58178

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3717

CWE-ID: CWE-552

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to an incorrect JBOSS_LOCAL_USER challenge location. A local unprivileged user can access any user account on the affected system.

Wildfly Core
JBoss Enterprise Application Platform
Fuse
Red Hat Process Automation Manager (formerly JBoss BPM Suite)
eap7-jettison (Red Hat package)
eap7-velocity (Red Hat package)
eap7-snakeyaml (Red Hat package)
eap7-jackson-databind (Red Hat package)
eap7-resteasy (Red Hat package)
eap7-apache-cxf (Red Hat package)
eap7-netty (Red Hat package)
eap7-wildfly (Red Hat package)
Red Hat Single Sign-On

Install update from vendor's website.

Wildfly Core - update to 17.0.0
Red Hat Process Automation Manager (formerly JBoss BPM Suite) - update to 7.13.0
JBoss Enterprise Application Platform - addressed in versions 7.1.9, 7.4.2
Fuse - update to 7.11.1
eap7-jettison (Red Hat package) - update to 1.3.8-2.redhat_00002.1.ep7.el7
eap7-velocity (Red Hat package) - update to 1.7.0-3.redhat_00006.1.ep7.el7
eap7-snakeyaml (Red Hat package) - update to 1.33.0-1.SP1_redhat_00001.1.ep7.el7
eap7-jackson-databind (Red Hat package) - update to 2.8.11.6-2.SP1_redhat_00002.1.ep7.el7
eap7-resteasy (Red Hat package) - update to 3.0.27-1.Final_redhat_00001.1.ep7.el7
eap7-apache-cxf (Red Hat package) - update to 3.1.16-4.redhat_00003.1.ep7.el7
eap7-netty (Red Hat package) - update to 4.1.63-1.Final_redhat_00002.1.ep7.el7
eap7-wildfly (Red Hat package) - update to 7.1.9-2.GA_redhat_00002.1.ep7.el7
Red Hat Single Sign-On - update to 7.4.10

• https://bugzilla.redhat.com/show_bug.cgi?id=1991305

• Privilege escalation in Wildfly
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform
• Multiple vulnerabilities in Red Hat Process Automation Manager
• Multiple vulnerabilities in Red Hat Fuse
• Multiple vulnerabilities in Red Hat Single Sign-On 7.4
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7