7.5
CVE-2020-1748
- EPSS 0.31%
- Published 16.09.2020 16:15:14
- Last modified 21.11.2024 05:11:18
- Source secalert@redhat.com
- Teams watchlist Login
- Open Login
A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources.
Data is provided by the National Vulnerability Database (NVD)
Redhat ≫ Wildfly Elytron Version < 1.6.8.final-redhat-00001
Redhat ≫ Decision Manager Version7.0
Redhat ≫ Process Automation Version7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.31% | 0.511 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|