Lucene search
MitreCVELIST:CVE-2020-27978HistoryOct 28, 2020 - 2:43 p.m.
CVE-2020-27978
2020-10-2814:43:54
mitre
www.cve.org
2
cve-2020-27978
denial of service
shibboleth identify provider
java heap exhaustion
remote unauthenticated attacker
login flow
EPSS
0.002
Percentile
58.8%
Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. A remote unauthenticated attacker can cause a login flow to trigger Java heap exhaustion due to the creation of objects in the Java Servlet container session.
Related
cve
cve
CVE-2020-27978
2020-10-28 15:15:13
nvd
nvd
CVE-2020-27978
2020-10-28 15:15:13
prion
prion
Design/Logic Flaw
2020-10-28 15:15:00