Lucene search
PRIOn knowledge basePRION:CVE-2020-25680HistoryJan 07, 2021 - 6:15 p.m.
Design/Logic Flaw
2021-01-0718:15:00
PRIOn knowledge base
www.prio-n.com
4
A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL certificate with the keystore file’s ID is ‘unknown’. The validation of the certificate whether CN and hostname are matching stopped working and allow connecting to the back-end work. The highest threat from this vulnerability is to data integrity.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jboss_core_services_httpd | eq | 2.4.37 sp3 |
Related
nvd
nvd
CVE-2020-25680
2021-01-07 18:15:13
redhatcve
redhatcve
CVE-2020-25680
2020-10-29 14:56:45
cvelist
cvelist
CVE-2020-25680
2021-01-07 17:32:50
cve
cve
CVE-2020-25680
2021-01-07 18:15:13
redhat
redhat
nessus
nessus