CVE-2020-10714

—

CVSS 3.1

7.5 high

EPSS

1%p72

Published

Sep 23, 2020 (Sep 23, 2020)

Modified

Jun 17, 2026

Description

A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Vendors: redhat netapp
Products: wildfly elytron, codeready studio, descision manager, jboss fuse, process automation, oncommand insight
Weakness: CWE-384
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.