CVE-2020-1729CWE-863

A flaw was found in SmallRye's API through version 1.6.1

published May 28, 2021

CVSS
—
EPSS
0%
Percentile
18.1
In the wild
Unconfirmed
What it is

A flaw was found in SmallRye's API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this vulnerability is a threat to data confidentiality. This is fixed in SmallRye 1.6.2

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00269 · 18.1th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-05-28T13:09Z
EPSS history
Timeline
  • 28 MAY 13:09Z
    A flaw was found in SmallRye's API through version 1.6.1
    cvelistv5