CVE-2020-27978 in Identify Provider정보

요약

\~에 의해 MITRE • 2020. 10. 28.

Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. A remote unauthenticated attacker can cause a login flow to trigger Java heap exhaustion due to the creation of objects in the Java Servlet container session.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2020. 10. 28.

공개

2020. 10. 28.

모더레이션

수락

항목

VDB-164030

CPE

준비됨

CWE

CWE-404 (확인됨)

CVSS

7.5 (NVD)

EPSS

0.01855

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2020-27978
NVD	https://nvd.nist.gov/vuln/detail/CVE-2020-27978
CVE Details	https://www.cvedetails.com/cve/CVE-2020-27978/

◂ 이전 개요 다음 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!