medium4.2
CVE-2020-1732
A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads…
Impact
A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Soteria | before 1.0.1 |
| Redhat | Jboss Enterprise Application Platform | Version 7.0.0 |
| Redhat | Jboss Enterprise Application Platform Continuous Delivery | All versions |
| Redhat | Openshift Application Runtimes | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1732
- https://github.com/wildfly-security/soteria/commit/c2479f8c39d7d661341fdcaff7f5e97c5eea1a54
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1732
- https://github.com/wildfly-security/soteria/commit/c2479f8c39d7d661341fdcaff7f5e97c5eea1a54