Vulnerability CVE-2020-1732

Vulnerability Name:

CVE-2020-1732 (CCN-181358)

Assigned:

2019-11-27

Published:

2020-05-04

Updated:

2020-05-08

Summary:

A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request.

CVSS v3 Severity:

4.2 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
3.7 Low (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

4.9 Medium (CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

6.4 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-20

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2020-1732

Source: CCN
Type: Red Hat Bugzilla Bug 1801726
(CVE-2020-1732) - CVE-2020-1732 Soteria: security identity corruption across concurrent threads

Source: CONFIRM
Type: Issue Tracking, Patch, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1732

Source: XF
Type: UNKNOWN
wildfly-cve20201732-sec-bypass(181358)

Source: CCN
Type: Soteria GIT Repository
Merge pull request #1 from darranl/CVE-2020-1732

Source: CONFIRM
Type: Patch, Third Party Advisory
https://github.com/wildfly-security/soteria/commit/c2479f8c39d7d661341fdcaff7f5e97c5eea1a54

Vulnerable Configuration:

Configuration 1:

cpe:/a:redhat:soteria:*:*:*:*:*:*:*:* (Version < 1.0.1)

Configuration 2:

cpe:/a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*

OR cpe:/a:redhat:jboss_enterprise_application_platform_continuous_delivery:-:*:*:*:*:*:*:*

OR cpe:/a:redhat:openshift_application_runtimes:-:*:*:*:*:*:*:*

Denotes that component is vulnerable

BACK