CVSS 3.1
4.2 mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:NCVE-2020-1732
Medium (4.2) in redhat. EPSS 0.7% chance of exploitation in the next 30 days.
A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-20, CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:jboss_enterprise_application_platform
- redhat:jboss_enterprise_application_platform_continuous_delivery
- redhat:openshift_application_runtimes
- redhat:soteria