CVE-2020-14379

Опубликовано: 16 авг. 2022

Источник: nvd

CVSS3: 5.6

EPSS Низкий

Описание

A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=1840862
Issue Tracking
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1840862
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:jboss_a-mq:7:*:*:*:*:*:*:*

EPSS

Процентиль: 11%

0.00037

Низкий

5.6 Medium

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVE-2020-14379

CVSS3: 5.6

redhat

больше 4 лет назад

A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure.

GHSA-f2jp-gmm4-wp64

CVSS3: 5.6

github

больше 3 лет назад

A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure.

EPSS

Процентиль: 11%

0.00037

Низкий

5.6 Medium

CVSS3

Дефекты

CWE-611