7.5
CVE-2020-1748
- EPSS 0.31%
- Veröffentlicht 16.09.2020 16:15:14
- Zuletzt bearbeitet 21.11.2024 05:11:18
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginA flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Wildfly Elytron Version < 1.6.8.final-redhat-00001
Redhat ≫ Decision Manager Version7.0
Redhat ≫ Process Automation Version7.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.31% | 0.511 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|