Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-14379

Опубликовано: 04 нояб. 2021
Источник: redhat
CVSS3: 5.6
EPSS Низкий

Описание

A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure.

A flaw was found in broker. An XEE attack can used in Broker's configuration files, leading to DoS and information disclosure. The highest threat from the vulnerability is to system availability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat AMQ Broker 7brokerWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-611
https://bugzilla.redhat.com/show_bug.cgi?id=1840862broker: XXE injection in configuration files

EPSS

Процентиль: 13%
0.00221
Низкий

5.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.6
nvd
около 4 лет назад

A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure.

CVSS3: 5.6
github
около 4 лет назад

A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure.

EPSS

Процентиль: 13%
0.00221
Низкий

5.6 Medium

CVSS3