[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyHCcHLkLEGxjwM01SU60Wl1GfKhlypPu_30nLizii9M":3,"g5a-risk:CVE-2022-3143":110},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":25,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":45,"references":46,"referencesCount":45,"weaknesses":54,"weaknessesCount":63,"isActivelyExploited":64,"cisaInfo":25,"otxData":25,"relatedBlogPosts":65,"seoMetadata":66,"configurations":91,"relatedVendorCves":105,"notableEvents":106},"CVE-2022-3143","What is CVE-2022-3143?","wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.security.MessageDigest.isEqual instead. This flaw allows an attacker to access secure information or impersonate an authed user.","wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in s...","2023-01-13T06:15:11.08","2025-04-09T14:15:23.85",7.4,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":25,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":23,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.2,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":23,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},0.00584,[32,32,32,32,32,32,32],"High",[36,41],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"redhat","wildfly_elytron","1.15.15","cpe:2.3:a:redhat:wildfly_elytron:1.15.15:*:*:*:*:*:*:*",{"vendor":37,"product":42,"version":43,"criteria":44,"vulnerable":4},"jboss_enterprise_application_platform","7.0.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",2,[47,52],{"url":48,"source":49,"tags":50},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2022-3143","Red Hat",[51],"Vendor Advisory",{"url":48,"source":49,"tags":53},[51],[55],{"id":56,"name":57,"description":58,"extendedDescription":59,"status":60,"abstraction":61,"structure":62},"CWE-203","Observable Discrepancy","The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.","Discrepancies can take many forms, and variations may be detectable in timing, control flow, communications such as replies or requests, or general behavior. These discrepancies can reveal information about the product's operation or internal state to an unauthorized actor. In some cases, discrepancies can be used by attackers to form a side channel.","Incomplete","Base","Simple",1,false,[],{"title":67,"metaDescription":68,"keywords":69,"canonicalUrl":70,"structuredData":71},"What is CVE-2022-3143? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-3143, a high severity cyber security vulnerability from 2023. wildfly-elytron: possible timing attacks via use of unsafe c...","CVE-2022-3143, CVE-2022-3143 vulnerability, CVE-2022-3143 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, redhat security, wildfly_elytron vulnerability, jboss_enterprise_application_platform vulnerability","\u002Fwhat-is\u002Fcve-2022-3143",{"@context":72,"@type":73,"headline":67,"description":68,"datePublished":10,"dateModified":11,"author":74,"publisher":78,"about":82,"mainEntityOfPage":86,"articleSection":89,"keywords":90},"https:\u002F\u002Fschema.org","TechArticle",{"@type":75,"name":76,"url":77},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":75,"name":76,"url":77,"logo":79},{"@type":80,"url":81},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":83,"name":6,"description":84,"additionalType":85},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":87,"@id":88},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-3143","Cybersecurity","CVE-2022-3143, CVE-2022-3143 vulnerability, CVE-2022-3143 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[92,99],{"Operator":25,"Negate":25,"Nodes":93},[94],{"Operator":95,"Negate":25,"CPEMatch":96},"OR",[97],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":98,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"949CB761-318B-460A-85E9-7B8B4F867BFA",{"Operator":25,"Negate":25,"Nodes":100},[101],{"Operator":95,"Negate":25,"CPEMatch":102},[103],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":104,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"72A54BDA-311C-413B-8E4D-388AD65A170A",[],[],{"lastModified":11,"cacheTime":108,"version":109},1792372647434,"2.0",{"score":111,"band":112,"action":113,"scoredAt":114},47,"Medium","Plan remediation","2026-10-16T06:56:51.594009+00:00"]