CVE-2020-1748

Published: Sep 16, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources.

Affected (3)

Products: Redhat: Wildfly Elytron, Decision Manager, Process Automation

3 products

Wildfly Elytron

Decision Manager

Process Automation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Wildfly Elytron	Before 1.6.8.final-redhat-00001

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Decision Manager	Version 7.0
Redhat Process Automation	Version 7.0

References (4)

https://bugzilla.redhat.com/show_bug.cgi?id=1807707

Source: secalert@redhat.com

Issue TrackingVendor Advisory

https://security.netapp.com/advisory/ntap-20201001-0005/

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1807707

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

https://security.netapp.com/advisory/ntap-20201001-0005/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.