TROYANOSYVIRUS
Zuruck zu CVEs

CVE-2020-13956

MEDIUM
5.3

Beschreibung

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

CVE Details

CVSS v3.1 Bewertung5.3
SchweregradMEDIUM
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionNONE
Veroffentlicht12/2/2020
Zuletzt geandert12/1/2025
Quellenvd
Honeypot-Sichtungen0

Betroffene Produkte

apache:httpclientnetapp:active_iq_unified_managernetapp:snapcenteroracle:commerce_guided_searchoracle:communications_cloud_native_core_service_communication_proxyoracle:data_integratororacle:jd_edwards_enterpriseone_orchestratororacle:jd_edwards_enterpriseone_toolsoracle:nosql_databaseoracle:peoplesoft_enterprise_peopletoolsoracle:peoplesoft_enterprise_pt_peopletoolsoracle:primavera_unifieroracle:retail_customer_management_and_segmentation_foundationoracle:spatial_studiooracle:sql_developeroracle:weblogic_serverquarkus:quarkus

Referenzen

https://priyankn.github.io/2021-02-26-CVE-2020-13956/(af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20220210-0002/(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com//security-alerts/cpujul2021.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuApr2021.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuapr2022.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpujan2022.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuoct2021.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.