CVE:CVE-2021-3642
CNNVD:CNNVD-202108-541
Red Hat WildFly Elytron是美国红帽（Red Hat）公司的一款用于应用程序服务器的安全框架。该产品支持配置服务器的管理访问权限等功能。
Red Hat Wildfly Elytron存在安全漏洞，在 1.10.14.Final 之前、1.15.5.Final 之前和 1.16.1.Final 之前的版本中，在 Wildfly Elytron 中发现了一个缺陷，如果启用 ScramServer 可能容易受到定时攻击。此漏洞的最大威胁是机密性。
solution:Upgrade redhat wildfly_elytron to a higher version than 1.10.14,1.15.5,1.16.1,and avoid the version (,1.10.14),[1.11.0,1.15.5),[1.16.0,1.16.1); Upgrade redhat build_of_quarkus to a higher version than -; Upgrade redhat codeready_studio to a higher version than 12.0,and avoid the version 12.0; Upgrade redhat data_grid to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat descision_manager to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat integration_camel_k to a higher version than -; Upgrade redhat integration_camel_quarkus to a higher version than *; Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.0.0,and avoid the version 7.0.0; Upgrade redhat jboss_enterprise_application_platform_expansion_pack to a higher version than -; Upgrade redhat jboss_fuse to a higher version than 7.0.0,and avoid the version 7.0.0; Upgrade redhat openshift_application_runtimes to a higher version than -; Upgrade redhat process_automation to a higher version than 7.0,and avoid the version 7.0; Upgrade quarkus quarkus to a higher version than 2.1.4,and avoid the version (,2.1.4]