TROYANOSYVIRUS
Retour aux CVEs

CVE-2020-13956

MEDIUM
5.3

Description

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Details CVE

Score CVSS v3.15.3
SeveriteMEDIUM
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie12/2/2020
Derniere modification12/1/2025
Sourcenvd
Observations honeypot0

Produits affectes

apache:httpclientnetapp:active_iq_unified_managernetapp:snapcenteroracle:commerce_guided_searchoracle:communications_cloud_native_core_service_communication_proxyoracle:data_integratororacle:jd_edwards_enterpriseone_orchestratororacle:jd_edwards_enterpriseone_toolsoracle:nosql_databaseoracle:peoplesoft_enterprise_peopletoolsoracle:peoplesoft_enterprise_pt_peopletoolsoracle:primavera_unifieroracle:retail_customer_management_and_segmentation_foundationoracle:spatial_studiooracle:sql_developeroracle:weblogic_serverquarkus:quarkus

References

https://priyankn.github.io/2021-02-26-CVE-2020-13956/(af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20220210-0002/(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com//security-alerts/cpujul2021.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuApr2021.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuapr2022.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpujan2022.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuoct2021.html(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.