VULNERABILITY INTELLIGENCE

CVE-2020-1732

CVSS score4.2 MEDIUM

EPSS probability0.66%

CISA KEVNot currently listed

Published2020-05-04

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request.

Weakness classification

secalert@redhat.com: CWE-284
nvd@nist.gov: CWE-20

Primary references

secalert@redhat.com — Issue Tracking, Patch, Vendor Advisory
secalert@redhat.com — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory