CVE-2020-10714CWE-384

A flaw was found in WildFly Elytron version 1.11.3.Final and before

published September 23, 2020

CVSS
—
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01454 · 73.2th percentile
Weakness
CWE-384 · Session Fixation
Published
2020-09-23T12:28Z
EPSS history
Timeline
  • 23 SEP 12:28Z
    A flaw was found in WildFly Elytron version 1.11.3.Final and before
    cvelistv5