VDB
BDU%3A2020-00626
BDU%3A2020-00626
PUBLISHED
CVSS 7.599999904632568 HIGH
Уязвимость компонента com.sun.net.ssl каркаса для веб-сервисов Apache CXF, позволяющая нарушителю реализовать атаку типа «человек посередине»
Risk Scores
CVSS 2.0
7.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Oracle Corp., Apache Software Foundation, SAP | Red Hat Virtualization, Oracle Retail Order Broker, Enterprise Manager Base Platform, Oracle FLEXCUBE Private Banking, Red Hat JBoss Fuse, Communications Diameter Signaling Router, CXF, JBoss Enterprise Application Platform, Red Hat Single Sign-On, Red Hat JBoss EAP, SAP Enterprise Architecture Designer, Oracle Communications Session Report Manager, Oracle Communications Session Route Manager |
Timeline
- Feb 17, 2020 CVE Published
- May 20, 2020 CVE Updated
References
- https://nvd.nist.gov/vuln/detail/CVE-2018-8039 url
- https://github.com/apache/cxf/commit/fae6fabf9bd7647f5e9cb68897a7d72b545b741b url
- https://lists.apache.org/thread.html/1f8ff31df204ad0374ab26ad333169e0387a5e7ec92422f337431866@%3Cdev.cxf.apache.org%3E url
- https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E url
- https://bugzilla.redhat.com/show_bug.cgi?id=1595332 url
- https://www.oracle.com/security-alerts/cpujul2019.html url
- https://www.oracle.com/security-alerts/cpuapr2020.html url
- http://cxf.apache.org/security-advisories.data/CVE-2018-8039.txt.asc?version=1&modificationDate=1530184663000&api=v2 advisory
- https://access.redhat.com/security/cve/cve-2018-8039 advisory
- https://www.oracle.com/security-alerts/cpujan2020.html advisory
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943 advisory