CVE-2020-14379: A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information…

medium5.6CVSS 3.1

AVLACLPRHUINSUCLILAH

A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
fasterxml	jackson-databind	>= 0 < 2.4.2-3ubuntu0.1~esm2	2.4.2-3ubuntu0.1~esm2
redhat	jboss_a-mq	—	—

CVSS provenance

nvdv3.15.6MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H

osv9.8CRITICAL