CVE-2020-1748

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Sep 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-174806.1TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the core parser, the paste plugin, and the visualchars plugin by using the clipboard CVE-2020-174824.3An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records in CVE-2020-174837.5An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive information disclosure of all t CVE-2020-174846.1An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL within the application CVE-2020-174859.8A Remote Code Execution vulnerability exist in Uffizio's GPS Tracker all versions. The web server can be compromised by uploading and execut CVE-2020-174877.5radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x50 CVE-2020-174894.3An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from CVE-2020-17497.5A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. Whe CVE-2020-174905.5The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.CVE-2020-174945.3Untangle Firewall NG before 16.0 uses MD5 for passwords.CVE-2020-174957.5django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. T CVE-2020-174969.8vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel