CVE-2020-14319
Last modified
CVE-2020-14319 is a medium-severity vulnerability rated 5.9/10 on the CVSS scale. It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery (CSRF) which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. EPSS estimates a 0.32% chance of exploitation in the next 30 days.
Description
It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery (CSRF) which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This flaw affects all versions of AMQ-Online prior to 1.5.2 and Enmasse versions 0.31.0-rc1 up until but not including 0.32.2.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Amq Online | < 1.5.2 |
| Redhat | Enmasse | < 0.32.2 |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1854373Issue Tracking, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1854373Issue Tracking, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-14319?
How severe is CVE-2020-14319?
How do I fix CVE-2020-14319?
Are you affected by CVE-2020-14319?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST