Vulnerabilities > CVE-2020-1710 - Unspecified vulnerability in Redhat products

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
redhat
NVD
Published: 2020-09-16
Updated: 2020-09-22

Summary

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.

Vulnerable Configurations

Part Description Count
Application
Redhat
9

References