What is CVE-2020-1732?

CVE-2020-1732 is a medium-severity vulnerability in Red Hat Soteria, classified under Improper Access Control. CVSS score: 4.2/10. Published 2020-05-04.

How severe is CVE-2020-1732?

Medium severity. CVSS v3 base score is 4.2 out of 10.

Improper input validation in Red Hat Soteria

CVE-2020-1732

A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request.

EPSS: 0.007 (50.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N.

Affected products

Red Hat Soteria — versions before 1.0.1
Redhat Jboss_enterprise_application_platform — versions 7.0.0
Redhat Jboss_enterprise_application_platform_continuous_delivery
Redhat Openshift_application_runtimes
Redhat Soteria

Weakness classification (CWE)

References

secalert@redhat.com (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Patch, Third Party Advisory)

Frequently asked questions

What is CVE-2020-1732?: CVE-2020-1732 is a medium-severity vulnerability in Red Hat Soteria, classified under Improper Access Control. CVSS score: 4.2/10. Published 2020-05-04.
How severe is CVE-2020-1732?: Medium severity. CVSS v3 base score is 4.2 out of 10.