CVE-2020-1732
CVE-2020-1732
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.2EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
04 may 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Productos afectados
Red Hat · Soteria¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →