Provide references for further information: Can you share references or external links related to CVE-2020-1697?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1697'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1697?


Explain the CVE ID: What does the identifier CVE-2020-1698 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1698.

A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.


Provide references for further information: Can you share references or external links related to CVE-2020-1698?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1698'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1698?


Explain the CVE ID: What does the identifier CVE-2020-1699 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1699.

A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0. An unauthenticated attacker could use this flaw to cause information disclosure on the host machine running the Ceph dashboard.


Provide references for further information: Can you share references or external links related to CVE-2020-1699?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1699'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1699?


Explain the CVE ID: What does the identifier CVE-2020-1700 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1700.

A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of service condition by pile up of CLOSE_WAIT sockets, eventually leading to the exhaustion of available resources, preventing legitimate users from connecting to the system.


Provide references for further information: Can you share references or external links related to CVE-2020-1700?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1700'}, {'name': 'openSUSE-SU-2020:0187', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00009.html'}, {'name': 'USN-4304-1', 'tags': ['vendor-advisory'], 'url': 'https://usn.ubuntu.com/4304-1/'}, {'name': '[debian-lts-announce] 20231023 [SECURITY] [DLA 3629-1] ceph security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1700?


Explain the CVE ID: What does the identifier CVE-2020-1701 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1701.

A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handler. An attacker with access to create VMs could attach any secret within their namespace, allowing them to read the contents of that secret.


Provide references for further information: Can you share references or external links related to CVE-2020-1701?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1792092'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1701?


Explain the CVE ID: What does the identifier CVE-2020-1702 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1702.

A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.


Provide references for further information: Can you share references or external links related to CVE-2020-1702?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1792796'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1702?


Explain the CVE ID: What does the identifier CVE-2020-1703 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1703.


Provide references for further information: Can you share references or external links related to CVE-2020-1703?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1703?


Explain the CVE ID: What does the identifier CVE-2020-1704 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1704.

An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.


Provide references for further information: Can you share references or external links related to CVE-2020-1704?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1704'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1704?


Explain the CVE ID: What does the identifier CVE-2020-1705 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1705.

A vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/template-service-broker-operator. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.


Provide references for further information: Can you share references or external links related to CVE-2020-1705?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1705'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1705?


Explain the CVE ID: What does the identifier CVE-2020-1706 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1706.

It has been found that in openshift-enterprise version 3.11 and openshift-enterprise versions 4.1 up to, including 4.3, multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/apb-tools-container.


Provide references for further information: Can you share references or external links related to CVE-2020-1706?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1706?


Explain the CVE ID: What does the identifier CVE-2020-1707 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1707.

A vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the container openshift/postgresql-apb. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.


Provide references for further information: Can you share references or external links related to CVE-2020-1707?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1707?


Explain the CVE ID: What does the identifier CVE-2020-1708 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1708.

It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/mysql-apb.


Provide references for further information: Can you share references or external links related to CVE-2020-1708?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1708'}, {'name': 'RHSA-2020:0681', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0681'}, {'name': 'RHSA-2020:0617', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0617'}, {'name': 'RHSA-2020:0694', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0694'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1708?


Explain the CVE ID: What does the identifier CVE-2020-1709 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1709.

A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/mediawiki. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.


Provide references for further information: Can you share references or external links related to CVE-2020-1709?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1709?


Explain the CVE ID: What does the identifier CVE-2020-1710 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1710.

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.


Provide references for further information: Can you share references or external links related to CVE-2020-1710?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1793970'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1710?


Explain the CVE ID: What does the identifier CVE-2020-1711 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1711.

An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Block (LBA) in an iscsi_co_block_status() routine. A remote user could use this flaw to crash the QEMU process, resulting in a denial of service or potential execution of arbitrary code with privileges of the QEMU process on the host.


Provide references for further information: Can you share references or external links related to CVE-2020-1711?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1711'}, {'tags': ['x_refsource_MISC'], 'url': 'https://lists.gnu.org/archive/html/qemu-devel/2020-01/msg05535.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2020/01/23/3'}, {'name': 'USN-4283-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4283-1/'}, {'name': 'RHSA-2020:0669', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0669'}, {'name': 'RHSA-2020:0773', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0773'}, {'name': 'RHSA-2020:0730', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0730'}, {'name': 'RHSA-2020:0731', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0731'}, {'name': '[debian-lts-announce] 20200316 [SECURITY] [DLA 2144-1] qemu security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/03/msg00017.html'}, {'name': 'openSUSE-SU-2020:0468', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html'}, {'name': 'GLSA-202005-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202005-02'}, {'name': '[debian-lts-announce] 20200913 [SECURITY] [DLA 2373-1] qemu security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1711?


Explain the CVE ID: What does the identifier CVE-2020-1712 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1712.

A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.


Provide references for further information: Can you share references or external links related to CVE-2020-1712?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1712'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.openwall.com/lists/oss-security/2020/02/05/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/systemd/systemd/commit/ea0d0ede03c6f18dbc5036c5e9cccf97e415ccc2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/systemd/systemd/commit/1068447e6954dc6ce52f099ed174c442cb89ed54'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/systemd/systemd/commit/637486261528e8aa3da9f26a4487dc254f4b7abb'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/systemd/systemd/commit/bc130b6858327b382b07b3985cf48e2aa9016b2d'}, {'name': '[debian-lts-announce] 20220630 [SECURITY] [DLA 3063-1] systemd security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/06/msg00025.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1712?


Explain the CVE ID: What does the identifier CVE-2020-1713 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1713.


Provide references for further information: Can you share references or external links related to CVE-2020-1713?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1713?


Explain the CVE ID: What does the identifier CVE-2020-1714 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1714.

A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Objects, which would then get deserialized in a privileged context and potentially lead to remote code execution.


Provide references for further information: Can you share references or external links related to CVE-2020-1714?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1714'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/keycloak/keycloak/pull/7053'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1714?


Explain the CVE ID: What does the identifier CVE-2020-1715 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1715.


Provide references for further information: Can you share references or external links related to CVE-2020-1715?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1715?


Explain the CVE ID: What does the identifier CVE-2020-1716 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1716.

A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph dashboard to initiate read, write, and delete Ceph clusters and also modify Ceph cluster configurations. Versions before ceph-ansible 6.0.0alpha1 are affected.


Provide references for further information: Can you share references or external links related to CVE-2020-1716?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1795592'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1716?


Explain the CVE ID: What does the identifier CVE-2020-1717 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1717.

A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.


Provide references for further information: Can you share references or external links related to CVE-2020-1717?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1796281'}, {'tags': ['x_refsource_MISC'], 'url': 'https://issues.jboss.org/browse/KEYCLOAK-12014'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1717?


Explain the CVE ID: What does the identifier CVE-2020-1718 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1718.

A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.


Provide references for further information: Can you share references or external links related to CVE-2020-1718?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1718'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1718?


Explain the CVE ID: What does the identifier CVE-2020-1719 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1719.

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.


Provide references for further information: Can you share references or external links related to CVE-2020-1719?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1796617'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1719?


Explain the CVE ID: What does the identifier CVE-2020-1720 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1720.

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issue affects PostgreSQL versions before 12.2, before 11.7, before 10.12 and before 9.6.17.


Provide references for further information: Can you share references or external links related to CVE-2020-1720?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1720'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.postgresql.org/about/news/2011/'}, {'name': 'openSUSE-SU-2020:1227', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1720?


Explain the CVE ID: What does the identifier CVE-2020-1721 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1721.

A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a key recovery request, enabling a reflected cross-site scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.


Provide references for further information: Can you share references or external links related to CVE-2020-1721?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1777579'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1721?


Explain the CVE ID: What does the identifier CVE-2020-1722 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1722.

A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.


Provide references for further information: Can you share references or external links related to CVE-2020-1722?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1722'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1722?


Explain the CVE ID: What does the identifier CVE-2020-1723 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1723.

A flaw was found in Keycloak Gatekeeper (Louketo). The logout endpoint can be abused to redirect logged-in users to arbitrary web pages. Affected versions of Keycloak Gatekeeper (Louketo): 6.0.1, 7.0.0


Provide references for further information: Can you share references or external links related to CVE-2020-1723?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1770276'}, {'tags': ['x_refsource_MISC'], 'url': 'https://issues.redhat.com/browse/KEYCLOAK-11318'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1723?


Explain the CVE ID: What does the identifier CVE-2020-1724 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1724.

A flaw was found in Keycloak in versions before 9.0.2. This flaw allows a malicious user that is currently logged in, to see the personal information of a previously logged out user in the account manager section.


Provide references for further information: Can you share references or external links related to CVE-2020-1724?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1724'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1724?


Explain the CVE ID: What does the identifier CVE-2020-1725 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1725.

A flaw was found in keycloak before version 13.0.0. In some scenarios a user still has access to a resource after changing the role mappings in Keycloak and after expiration of the previous access token.


Provide references for further information: Can you share references or external links related to CVE-2020-1725?

{'tags': ['x_refsource_MISC'], 'url': 'https://issues.redhat.com/browse/KEYCLOAK-16550'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1765129'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1725?


Explain the CVE ID: What does the identifier CVE-2020-1726 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1726.

A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only. When a user runs a malicious container or a container based on a malicious image with an attached volume that is used for the first time, it is possible to trigger the flaw and overwrite files in the volume.This issue was introduced in version 1.6.0.


Provide references for further information: Can you share references or external links related to CVE-2020-1726?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1726'}, {'name': 'RHSA-2020:0680', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0680'}, {'name': 'openSUSE-SU-2020:1552', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00097.html'}, {'name': 'openSUSE-SU-2020:1559', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00103.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1726?


Explain the CVE ID: What does the identifier CVE-2020-1727 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1727.

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.


Provide references for further information: Can you share references or external links related to CVE-2020-1727?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1727'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1727?


Explain the CVE ID: What does the identifier CVE-2020-1728 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1728.

A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-responses. This does not directly lead to a security issue, yet it might aid attackers in their efforts to exploit other problems. The flaws unnecessarily make the servers more prone to Clickjacking, channel downgrade attacks and other similar client-based attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2020-1728?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1728'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1728?


Explain the CVE ID: What does the identifier CVE-2020-1729 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1729.

A flaw was found in SmallRye's API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this vulnerability is a threat to data confidentiality. This is fixed in SmallRye 1.6.2


Provide references for further information: Can you share references or external links related to CVE-2020-1729?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1802444'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1729?


Explain the CVE ID: What does the identifier CVE-2020-1730 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1730.

A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.


Provide references for further information: Can you share references or external links related to CVE-2020-1730?

{'name': 'FEDORA-2020-5a77f0d68f', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLSWHBQ3EPKGTGLQNH554Z746BJ3C554/'}, {'name': 'USN-4327-1', 'tags': ['vendor-advisory'], 'url': 'https://usn.ubuntu.com/4327-1/'}, {'name': 'FEDORA-2020-6cad41abb0', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2A7BIFKUYIYKTY7FX4BEWVC2OHS5DPOU/'}, {'url': 'https://www.oracle.com/security-alerts/cpuoct2020.html'}, {'url': 'https://www.libssh.org/security/advisories/CVE-2020-1730.txt'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1730'}, {'url': 'https://security.netapp.com/advisory/ntap-20200424-0001/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1730?


Explain the CVE ID: What does the identifier CVE-2020-1731 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1731.

A flaw was found in all versions of the Keycloak operator, before version 8.0.2,(community only) where the operator generates a random admin password when installing Keycloak, however the password remains the same when deployed to the same OpenShift namespace.


Provide references for further information: Can you share references or external links related to CVE-2020-1731?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1731'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1731?


Explain the CVE ID: What does the identifier CVE-2020-1732 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1732.

A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request.


Provide references for further information: Can you share references or external links related to CVE-2020-1732?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1732'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/wildfly-security/soteria/commit/c2479f8c39d7d661341fdcaff7f5e97c5eea1a54'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1732?


Explain the CVE ID: What does the identifier CVE-2020-1733 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1733.

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask 77 && mkdir -p <dir>"; this operation does not fail if the directory already exists and is owned by another user. An attacker could take advantage to gain control of the become user as the target directory can be retrieved by iterating '/proc/<pid>/cmdline'.


Provide references for further information: Can you share references or external links related to CVE-2020-1733?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1733'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/ansible/ansible/issues/67791'}, {'name': 'FEDORA-2020-1b6ce91e37', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/'}, {'name': 'FEDORA-2020-3990f03ba3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/'}, {'name': 'FEDORA-2020-f80154b5b4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/'}, {'name': '[debian-lts-announce] 20200505 [SECURITY] [DLA 2202-1] ansible security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html'}, {'name': 'GLSA-202006-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202006-11'}, {'name': 'DSA-4950', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4950'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1733?


Explain the CVE ID: What does the identifier CVE-2020-1734 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1734.

A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitrary commands by overwriting the ansible facts.


Provide references for further information: Can you share references or external links related to CVE-2020-1734?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1734'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/ansible/ansible/issues/67792'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1734?


Explain the CVE ID: What does the identifier CVE-2020-1735 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1735.

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.


Provide references for further information: Can you share references or external links related to CVE-2020-1735?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1735'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ansible/ansible/issues/67793'}, {'name': 'FEDORA-2020-1b6ce91e37', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/'}, {'name': 'FEDORA-2020-3990f03ba3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/'}, {'name': 'FEDORA-2020-f80154b5b4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/'}, {'name': 'GLSA-202006-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202006-11'}, {'name': 'DSA-4950', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4950'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1735?


Explain the CVE ID: What does the identifier CVE-2020-1736 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1736.

A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions before the move. This could lead to the disclosure of sensitive data. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.


Provide references for further information: Can you share references or external links related to CVE-2020-1736?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1736'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ansible/ansible/issues/67794'}, {'name': 'GLSA-202006-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202006-11'}, {'name': 'FEDORA-2020-1e6eeadbb4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD/'}, {'name': 'FEDORA-2020-d5e74bf9a0', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1736?


Explain the CVE ID: What does the identifier CVE-2020-1737 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1737.

A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path traversal. This issue is fixed in 2.10.


Provide references for further information: Can you share references or external links related to CVE-2020-1737?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1737'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/ansible/ansible/issues/67795'}, {'name': 'FEDORA-2020-a3f12bcff4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/'}, {'name': 'FEDORA-2020-0cab7041f7', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/'}, {'name': 'FEDORA-2020-87f5e1e829', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/'}, {'name': 'GLSA-202006-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202006-11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1737?


Explain the CVE ID: What does the identifier CVE-2020-1738 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1738.

A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.


Provide references for further information: Can you share references or external links related to CVE-2020-1738?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1738'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ansible/ansible/issues/67796'}, {'name': 'GLSA-202006-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202006-11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1738?


Explain the CVE ID: What does the identifier CVE-2020-1739 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1739.

A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.


Provide references for further information: Can you share references or external links related to CVE-2020-1739?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/ansible/ansible/issues/67797'}, {'name': 'FEDORA-2020-a3f12bcff4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/'}, {'name': 'FEDORA-2020-0cab7041f7', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/'}, {'name': 'FEDORA-2020-87f5e1e829', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/'}, {'name': '[debian-lts-announce] 20200505 [SECURITY] [DLA 2202-1] ansible security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html'}, {'name': 'DSA-4950', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4950'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1739?


Explain the CVE ID: What does the identifier CVE-2020-1740 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1740.

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.


Provide references for further information: Can you share references or external links related to CVE-2020-1740?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ansible/ansible/issues/67798'}, {'name': 'FEDORA-2020-1b6ce91e37', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/'}, {'name': 'FEDORA-2020-3990f03ba3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/'}, {'name': 'FEDORA-2020-f80154b5b4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/'}, {'name': '[debian-lts-announce] 20200505 [SECURITY] [DLA 2202-1] ansible security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html'}, {'name': 'GLSA-202006-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202006-11'}, {'name': 'DSA-4950', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4950'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1740?


Explain the CVE ID: What does the identifier CVE-2020-1741 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1741.

A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specified CORS allowed origins during installation. An attacker, able to man-in-the-middle the connection between the user's browser and the openshift console, could use this flaw to perform a phishing attack. The main threat from this vulnerability is data confidentiality.


Provide references for further information: Can you share references or external links related to CVE-2020-1741?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1741'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1741?


Explain the CVE ID: What does the identifier CVE-2020-1742 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1742.

An insecure modification vulnerability flaw was found in containers using nmstate/kubernetes-nmstate-handler. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. Versions before kubernetes-nmstate-handler-container-v2.3.0-30 are affected.


Provide references for further information: Can you share references or external links related to CVE-2020-1742?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1803608'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1742?


Explain the CVE ID: What does the identifier CVE-2020-1744 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1744.

A flaw was found in keycloak before version 9.0.1. When configuring an Conditional OTP Authentication Flow as a post login flow of an IDP, the failure login events for OTP are not being sent to the brute force protection event queue. So BruteForceProtector does not handle this events.


Provide references for further information: Can you share references or external links related to CVE-2020-1744?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1744?


Explain the CVE ID: What does the identifier CVE-2020-1745 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1745.

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.


Provide references for further information: Can you share references or external links related to CVE-2020-1745?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1745?


Explain the CVE ID: What does the identifier CVE-2020-1746 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1746.

A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when the ldap_attr and ldap_entry community modules are used. The issue discloses the LDAP bind password to stdout or a log file if a playbook task is written using the bind_pw in the parameters field. The highest threat from this vulnerability is data confidentiality.


Provide references for further information: Can you share references or external links related to CVE-2020-1746?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1746'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ansible/ansible/pull/67866'}, {'name': 'DSA-4950', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4950'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1746?


Explain the CVE ID: What does the identifier CVE-2020-1747 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1747.

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.


Provide references for further information: Can you share references or external links related to CVE-2020-1747?

{'name': 'FEDORA-2020-40c35d7b37', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WORRFHPQVAFKKXXWLSSW6XKUYLWM6CSH/'}, {'name': 'FEDORA-2020-bdb0bfa928', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBJA3SGNJKCAYPSHOHWY3KBCWNM5NYK2/'}, {'name': 'FEDORA-2020-e9741a6a15', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5HEPD7LEVDPCITY5IMDYWXUMX37VFMY/'}, {'name': 'openSUSE-SU-2020:0507', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00017.html'}, {'name': 'openSUSE-SU-2020:0630', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00017.html'}, {'name': 'FEDORA-2021-3342569a0f', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MMQXSZXNJT6ERABJZAAICI3DQSQLCP3D/'}, {'name': 'FEDORA-2021-eed7193502', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7PPAS6C4SZRDQLR7C22A5U3QOLXY33JX/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujul2022.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1747'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/yaml/pyyaml/pull/386'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1747?


Explain the CVE ID: What does the identifier CVE-2020-1748 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1748.

A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources.


Provide references for further information: Can you share references or external links related to CVE-2020-1748?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1807707'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20201001-0005/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1748?


Explain the CVE ID: What does the identifier CVE-2020-1749 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1749.

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.


Provide references for further information: Can you share references or external links related to CVE-2020-1749?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1749'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20201222-0001/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1749?


Explain the CVE ID: What does the identifier CVE-2020-1750 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1750.

A flaw was found in the machine-config-operator that causes an OpenShift node to become unresponsive when a container consumes a large amount of memory. An attacker could use this flaw to deny access to schedule new pods in the OpenShift cluster. This was fixed in openshift/machine-config-operator 4.4.3, openshift/machine-config-operator 4.3.25, openshift/machine-config-operator 4.2.36.


Provide references for further information: Can you share references or external links related to CVE-2020-1750?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1808130'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1750?


Explain the CVE ID: What does the identifier CVE-2020-1751 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1751.

An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.


Provide references for further information: Can you share references or external links related to CVE-2020-1751?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751'}, {'tags': ['x_refsource_MISC'], 'url': 'https://sourceware.org/bugzilla/show_bug.cgi?id=25423'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200430-0002/'}, {'name': 'GLSA-202006-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202006-04'}, {'name': 'USN-4416-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4416-1/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1751?


Explain the CVE ID: What does the identifier CVE-2020-1752 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1752.

A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.


Provide references for further information: Can you share references or external links related to CVE-2020-1752?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1752'}, {'url': 'https://sourceware.org/bugzilla/show_bug.cgi?id=25414'}, {'url': 'https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ddc650e9b3dc916eab417ce9f79e67337b05035c'}, {'url': 'https://security.netapp.com/advisory/ntap-20200511-0005/'}, {'name': 'USN-4416-1', 'tags': ['vendor-advisory'], 'url': 'https://usn.ubuntu.com/4416-1/'}, {'name': 'GLSA-202101-20', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202101-20'}, {'name': '[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8', 'tags': ['mailing-list'], 'url': 'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E'}, {'name': '[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8', 'tags': ['mailing-list'], 'url': 'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E'}, {'name': '[debian-lts-announce] 20221017 [SECURITY] [DLA 3152-1] glibc security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1752?


Explain the CVE ID: What does the identifier CVE-2020-1753 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1753.

A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl from the command line, not using an environment variable or an input configuration file. This will disclose passwords and tokens from process list and no_log directive from debug module would not have any effect making these secrets being disclosed on stdout and log files.


Provide references for further information: Can you share references or external links related to CVE-2020-1753?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ansible-collections/kubernetes/pull/51'}, {'name': 'FEDORA-2020-1b6ce91e37', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/'}, {'name': 'FEDORA-2020-3990f03ba3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/'}, {'name': 'FEDORA-2020-f80154b5b4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/'}, {'name': 'GLSA-202006-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202006-11'}, {'name': 'DSA-4950', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4950'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1753?


Explain the CVE ID: What does the identifier CVE-2020-1754 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1754.

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.


Provide references for further information: Can you share references or external links related to CVE-2020-1754?

{'tags': ['x_refsource_MISC'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=398350'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1754?


Explain the CVE ID: What does the identifier CVE-2020-1755 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1755.

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote address checks.


Provide references for further information: Can you share references or external links related to CVE-2020-1755?

{'tags': ['x_refsource_MISC'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=398351'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1755?


Explain the CVE ID: What does the identifier CVE-2020-1756 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1756.

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool.


Provide references for further information: Can you share references or external links related to CVE-2020-1756?

{'tags': ['x_refsource_MISC'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=398352'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1756?


Explain the CVE ID: What does the identifier CVE-2020-1757 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1757.

A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path after semicolon which may lead to an application mapping resulting in the security bypass.


Provide references for further information: Can you share references or external links related to CVE-2020-1757?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1757'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1757?


Explain the CVE ID: What does the identifier CVE-2020-1758 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1758.

A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack.


Provide references for further information: Can you share references or external links related to CVE-2020-1758?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1758'}, {'tags': ['x_refsource_MISC'], 'url': 'https://issues.redhat.com/browse/KEYCLOAK-13285'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1758?


Explain the CVE ID: What does the identifier CVE-2020-1759 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1759.

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.


Provide references for further information: Can you share references or external links related to CVE-2020-1759?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1759'}, {'name': 'FEDORA-2020-81b9c6cddc', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE/'}, {'name': 'GLSA-202105-39', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202105-39'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1759?


Explain the CVE ID: What does the identifier CVE-2020-1760 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1760.

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.


Provide references for further information: Can you share references or external links related to CVE-2020-1760?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1760'}, {'url': 'https://www.openwall.com/lists/oss-security/2020/04/07/1'}, {'name': 'FEDORA-2020-81b9c6cddc', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE/'}, {'name': 'USN-4528-1', 'tags': ['vendor-advisory'], 'url': 'https://usn.ubuntu.com/4528-1/'}, {'name': 'GLSA-202105-39', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202105-39'}, {'name': '[debian-lts-announce] 20210810 [SECURITY] [DLA 2735-1] ceph security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2021/08/msg00013.html'}, {'name': '[debian-lts-announce] 20231023 [SECURITY] [DLA 3629-1] ceph security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1760?


Explain the CVE ID: What does the identifier CVE-2020-1761 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1761.

A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attacker can use this flaw to get the access token via physical access, or an XSS attack on the victim's browser. This flaw affects openshift/console versions before openshift/console-4.


Provide references for further information: Can you share references or external links related to CVE-2020-1761?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1813788'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1761?


Explain the CVE ID: What does the identifier CVE-2020-1762 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1762.

An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration.


Provide references for further information: Can you share references or external links related to CVE-2020-1762?

{'tags': ['x_refsource_MISC'], 'url': 'https://kiali.io/news/security-bulletins/kiali-security-001/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1762'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1762?


Explain the CVE ID: What does the identifier CVE-2020-1763 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1763.

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.


Provide references for further information: Can you share references or external links related to CVE-2020-1763?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://libreswan.org/security/CVE-2020-1763/CVE-2020-1763.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1763'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1813329'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/libreswan/libreswan/commit/471a3e41a449d7c753bc4edbba4239501bb62ba8'}, {'name': 'DSA-4684', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2020/dsa-4684'}, {'name': 'GLSA-202007-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202007-21'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1763?


Explain the CVE ID: What does the identifier CVE-2020-1764 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1764.

A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possibly gaining privileges to view and alter the Istio configuration.


Provide references for further information: Can you share references or external links related to CVE-2020-1764?

{'tags': ['x_refsource_MISC'], 'url': 'https://kiali.io/news/security-bulletins/kiali-security-001/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1764'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1764?


Explain the CVE ID: What does the identifier CVE-2020-1765 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1765.

An improper control of parameters allows the spoofing of the from fields of the following screens: AgentTicketCompose, AgentTicketForward, AgentTicketBounce and AgentTicketEmailOutbound. This issue affects: ((OTRS)) Community Edition 5.0.x version 5.0.39 and prior versions; 6.0.x version 6.0.24 and prior versions. OTRS 7.0.x version 7.0.13 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1765?

{'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-01/'}, {'name': '[debian-lts-announce] 20200129 [SECURITY] [DLA 2079-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/01/msg00027.html'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}, {'name': '[debian-lts-announce] 20230831 [SECURITY] [DLA 3551-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1765?


Explain the CVE ID: What does the identifier CVE-2020-1766 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1766.

Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents browser to execute malicious javascript from a special crafted SVG file rendered as inline jpg file. This issue affects: ((OTRS)) Community Edition 5.0.x version 5.0.39 and prior versions; 6.0.x version 6.0.24 and prior versions. OTRS 7.0.x version 7.0.13 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1766?

{'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-02/'}, {'name': '[debian-lts-announce] 20200129 [SECURITY] [DLA 2079-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/01/msg00027.html'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}, {'name': '[debian-lts-announce] 20230831 [SECURITY] [DLA 3551-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1766?


Explain the CVE ID: What does the identifier CVE-2020-1767 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1767.

Agent A is able to save a draft (i.e. for customer reply). Then Agent B can open the draft, change the text completely and send it in the name of Agent A. For the customer it will not be visible that the message was sent by another agent. This issue affects: ((OTRS)) Community Edition 6.0.x version 6.0.24 and prior versions. OTRS 7.0.x version 7.0.13 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1767?

{'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-03/'}, {'name': '[debian-lts-announce] 20200129 [SECURITY] [DLA 2079-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/01/msg00027.html'}, {'name': '[debian-lts-announce] 20230831 [SECURITY] [DLA 3551-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1767?


Explain the CVE ID: What does the identifier CVE-2020-1768 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1768.

The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1768?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-04/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1768?


Explain the CVE ID: What does the identifier CVE-2020-1769 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1769.

In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1769?

{'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-06/'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}, {'name': '[debian-lts-announce] 20230831 [SECURITY] [DLA 3551-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1769?


Explain the CVE ID: What does the identifier CVE-2020-1770 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1770.

Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1770?

{'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-07/'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': '[debian-lts-announce] 20200501 [SECURITY] [DLA 2198-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/05/msg00000.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}, {'name': '[debian-lts-announce] 20230831 [SECURITY] [DLA 3551-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1770?


Explain the CVE ID: What does the identifier CVE-2020-1771 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1771.

Attacker is able craft an article with a link to the customer address book with malicious content (JavaScript). When agent opens the link, JavaScript code is executed due to the missing parameter encoding. This issue affects: ((OTRS)) Community Edition: 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1771?

{'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-08/'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}, {'name': '[debian-lts-announce] 20230831 [SECURITY] [DLA 3551-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1771?


Explain the CVE ID: What does the identifier CVE-2020-1772 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1772.

It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords. This issue affects: ((OTRS)) Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1772?

{'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-09/'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': '[debian-lts-announce] 20200501 [SECURITY] [DLA 2198-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/05/msg00000.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}, {'name': '[debian-lts-announce] 20230831 [SECURITY] [DLA 3551-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1772?


Explain the CVE ID: What does the identifier CVE-2020-1773 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1773.

An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS; 7.0.15 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1773?

{'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-10/'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}, {'name': '[debian-lts-announce] 20230831 [SECURITY] [DLA 3551-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1773?


Explain the CVE ID: What does the identifier CVE-2020-1774 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1774.

When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects ((OTRS)) Community Edition: 5.0.42 and prior versions, 6.0.27 and prior versions. OTRS: 7.0.16 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1774?

{'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-11/'}, {'name': '[debian-lts-announce] 20200501 [SECURITY] [DLA 2198-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/05/msg00000.html'}, {'name': '[debian-lts-announce] 20230831 [SECURITY] [DLA 3551-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1774?


Explain the CVE ID: What does the identifier CVE-2020-1775 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1775.

BCC recipients in mails sent from OTRS are visible in article detail on external interface. This issue affects OTRS: 8.0.3 and prior versions, 7.0.17 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1775?

{'tags': ['x_refsource_MISC'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-12/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1775?


Explain the CVE ID: What does the identifier CVE-2020-1776 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1776.

When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid. This issue affects ((OTRS)) Community Edition: 6.0.28 and prior versions. OTRS: 7.0.18 and prior versions, 8.0.4. and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1776?

{'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-13/'}, {'name': '[debian-lts-announce] 20230831 [SECURITY] [DLA 3551-1] otrs2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1776?


Explain the CVE ID: What does the identifier CVE-2020-1777 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1777.

Agent names that participates in a chat conversation are revealed in certain parts of the external interface as well as in chat transcriptions inside the tickets, when system is configured to mask real agent names. This issue affects OTRS; 7.0.21 and prior versions, 8.0.6 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1777?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-15/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1777?


Explain the CVE ID: What does the identifier CVE-2020-1778 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1778.

When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1778?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-16/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1778?


Explain the CVE ID: What does the identifier CVE-2020-1779 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1779.

When dynamic templates are used (OTRSTicketForms), admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior versions.


Provide references for further information: Can you share references or external links related to CVE-2020-1779?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-17/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1779?


Explain the CVE ID: What does the identifier CVE-2020-1785 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1785.

Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of the smartphone.


Provide references for further information: Can you share references or external links related to CVE-2020-1785?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1785?


Explain the CVE ID: What does the identifier CVE-2020-1786 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1786.

HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerability. The software does not sufficiently validate the name of apk file in a special condition which could allow an attacker to forge a crafted application as a normal one. Successful exploit could allow the attacker to bypass digital balance function.


Provide references for further information: Can you share references or external links related to CVE-2020-1786?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1786?


Explain the CVE ID: What does the identifier CVE-2020-1787 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1787.

HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an instant, without unlocking the screen lock of the host user.


Provide references for further information: Can you share references or external links related to CVE-2020-1787?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1787?


Explain the CVE ID: What does the identifier CVE-2020-1788 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1788.

Honor V30 smartphones with versions earlier than 10.0.1.135(C00E130R4P1) have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious application. Successful exploit could allow unauthorized actions leading to information disclosure.


Provide references for further information: Can you share references or external links related to CVE-2020-1788?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1788?


Explain the CVE ID: What does the identifier CVE-2020-1789 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1789.

Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability. The software does not require a strong credential when the user trying to do certain operations. Successful exploit could allow an attacker to pass the authentication and do certain operations by a weak credential.


Provide references for further information: Can you share references or external links related to CVE-2020-1789?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1789?


Explain the CVE ID: What does the identifier CVE-2020-1790 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1790.

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands.


Provide references for further information: Can you share references or external links related to CVE-2020-1790?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1790?


Explain the CVE ID: What does the identifier CVE-2020-1791 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1791.

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system has a logic judging error under certain scenario, successful exploit could allow the attacker to switch to third desktop after a series of operation in ADB mode.


Provide references for further information: Can you share references or external links related to CVE-2020-1791?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1791?


Explain the CVE ID: What does the identifier CVE-2020-1792 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1792.

Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) have an out of bounds write vulnerability. The software writes data past the end of the intended buffer because of insufficient validation of certain parameter when initializing certain driver program. An attacker could trick the user into installing a malicious application, successful exploit could cause the device to reboot.


Provide references for further information: Can you share references or external links related to CVE-2020-1792?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1792?


Explain the CVE ID: What does the identifier CVE-2020-1793 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1793.

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2).


Provide references for further information: Can you share references or external links related to CVE-2020-1793?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1793?


Explain the CVE ID: What does the identifier CVE-2020-1794 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1794.


Provide references for further information: Can you share references or external links related to CVE-2020-1794?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1794?


Explain the CVE ID: What does the identifier CVE-2020-1795 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2020-1795.

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations.Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2).


Provide references for further information: Can you share references or external links related to CVE-2020-1795?


Explain the state of this CVE: What is the publication or resolution state of CVE-2020-1795?


Explain the CVE ID: What does the identifier CVE-2020-1796 mean in the context of cybersecurity?