What is CVE-2020-14348?

CVE-2020-14348 is a medium-severity vulnerability in Red Hat Amq Online, classified under CWE-248. CVSS score: 4.3/10. Published 2020-09-16.

How severe is CVE-2020-14348?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Red Hat Amq Online

CVE-2020-14348

It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operate properly, such as the failure of provisioning and the failure of creating addresses, though this does not impact upon already existing messaging clients or brokers.

EPSS: 0.008 (55.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Affected products

Redhat Amq_online
N/a Amq — versions AMQ Online before 1.5.2

Weakness classification (CWE)

References

secalert@redhat.com (x_refsource_MISC, Issue Tracking)

Frequently asked questions

What is CVE-2020-14348?: CVE-2020-14348 is a medium-severity vulnerability in Red Hat Amq Online, classified under CWE-248. CVSS score: 4.3/10. Published 2020-09-16.
How severe is CVE-2020-14348?: Medium severity. CVSS v3 base score is 4.3 out of 10.