TROYANOSYVIRUS
Voltar para CVEs

CVE-2020-13956

MEDIUM
5.3

Descricao

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Detalhes CVE

Pontuacao CVSS v3.15.3
SeveridadeMEDIUM
Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Vetor de ataqueNETWORK
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioNONE
Publicado12/2/2020
Ultima modificacao12/1/2025
Fontenvd
Avistamentos honeypot0

Produtos afetados

apache:httpclientnetapp:active_iq_unified_managernetapp:snapcenteroracle:commerce_guided_searchoracle:communications_cloud_native_core_service_communication_proxyoracle:data_integratororacle:jd_edwards_enterpriseone_orchestratororacle:jd_edwards_enterpriseone_toolsoracle:nosql_databaseoracle:peoplesoft_enterprise_peopletoolsoracle:peoplesoft_enterprise_pt_peopletoolsoracle:primavera_unifieroracle:retail_customer_management_and_segmentation_foundationoracle:spatial_studiooracle:sql_developeroracle:weblogic_serverquarkus:quarkus

Referencias

https://priyankn.github.io/2021-02-26-CVE-2020-13956/(af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20220210-0002/(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com//security-alerts/cpujul2021.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuApr2021.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuapr2022.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpujan2022.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuoct2021.html(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.