[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fA-3uAXt9QRrNY8r_r38mwvb9eu201NDRBjXT7rixRzM":3,"g5a-risk:CVE-2020-1938":502},{"success":4,"data":5,"meta":500},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":177,"references":178,"referencesCount":344,"weaknesses":345,"weaknessesCount":349,"isActivelyExploited":4,"cisaInfo":350,"otxData":27,"relatedBlogPosts":351,"seoMetadata":352,"configurations":377,"relatedVendorCves":498,"notableEvents":499},"CVE-2020-1938","What is CVE-2020-1938?","When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.","When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having h...","2020-02-24T22:15:12.057","2025-10-27T17:37:12.387",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":45,"ObtainAllPrivilege":45,"ObtainUserPrivilege":45,"ObtainOtherPrivilege":45,"UserInteractionRequired":45},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":42,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,"",10,6.4,false,0.9927,[46,46,46,46,46,46,46],"Critical",[50,55,59,64,67,70,75,79,82,85,89,92,95,99,103,107,111,114,117,120,123,127,131,134,137,142,145,148,153,157,161,164,167,169,174],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"apache","geode","1.12.0","cpe:2.3:a:apache:geode:1.12.0:*:*:*:*:*:*:*",{"vendor":51,"product":56,"version":57,"criteria":58,"vulnerable":4},"tomcat","*","cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"fedoraproject","fedora","30","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":65,"criteria":66,"vulnerable":4},"31","cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":68,"criteria":69,"vulnerable":4},"32","cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",{"vendor":71,"product":72,"version":73,"criteria":74,"vulnerable":4},"oracle","agile_engineering_data_management","6.2.1.0","cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*",{"vendor":71,"product":76,"version":77,"criteria":78,"vulnerable":4},"agile_plm","9.3.3","cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*",{"vendor":71,"product":76,"version":80,"criteria":81,"vulnerable":4},"9.3.5","cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*",{"vendor":71,"product":76,"version":83,"criteria":84,"vulnerable":4},"9.3.6","cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",{"vendor":71,"product":86,"version":87,"criteria":88,"vulnerable":4},"communications_element_manager","8.1.1","cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:*",{"vendor":71,"product":86,"version":90,"criteria":91,"vulnerable":4},"8.2.0","cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:*",{"vendor":71,"product":86,"version":93,"criteria":94,"vulnerable":4},"8.2.1","cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:*",{"vendor":71,"product":96,"version":97,"criteria":98,"vulnerable":4},"communications_instant_messaging_server","10.0.1.4.0","cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.4.0:*:*:*:*:*:*:*",{"vendor":71,"product":100,"version":101,"criteria":102,"vulnerable":4},"health_sciences_empirica_inspections","1.0.1.2","cpe:2.3:a:oracle:health_sciences_empirica_inspections:1.0.1.2:*:*:*:*:*:*:*",{"vendor":71,"product":104,"version":105,"criteria":106,"vulnerable":4},"health_sciences_empirica_signal","7.3.3","cpe:2.3:a:oracle:health_sciences_empirica_signal:7.3.3:*:*:*:*:*:*:*",{"vendor":71,"product":108,"version":109,"criteria":110,"vulnerable":4},"hospitality_guest_access","4.2.0","cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*",{"vendor":71,"product":108,"version":112,"criteria":113,"vulnerable":4},"4.2.1","cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*",{"vendor":71,"product":115,"version":57,"criteria":116,"vulnerable":4},"instantis_enterprisetrack","cpe:2.3:a:oracle:instantis_enterprisetrack:*:*:*:*:*:*:*:*",{"vendor":71,"product":118,"version":57,"criteria":119,"vulnerable":4},"mysql_enterprise_monitor","cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",{"vendor":71,"product":121,"version":57,"criteria":122,"vulnerable":4},"siebel_ui_framework","cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*",{"vendor":71,"product":124,"version":125,"criteria":126,"vulnerable":4},"transportation_management","6.3.7","cpe:2.3:a:oracle:transportation_management:6.3.7:*:*:*:*:*:*:*",{"vendor":71,"product":128,"version":129,"criteria":130,"vulnerable":4},"workload_manager","12.2.0.1","cpe:2.3:a:oracle:workload_manager:12.2.0.1:*:*:*:*:*:*:*",{"vendor":71,"product":128,"version":132,"criteria":133,"vulnerable":4},"18c","cpe:2.3:a:oracle:workload_manager:18c:*:*:*:*:*:*:*",{"vendor":71,"product":128,"version":135,"criteria":136,"vulnerable":4},"19c","cpe:2.3:a:oracle:workload_manager:19c:*:*:*:*:*:*:*",{"vendor":138,"product":139,"version":140,"criteria":141,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":138,"product":139,"version":143,"criteria":144,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":138,"product":139,"version":146,"criteria":147,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":149,"product":150,"version":151,"criteria":152,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",{"vendor":154,"product":155,"version":57,"criteria":156,"vulnerable":4},"blackberry","good_control","cpe:2.3:a:blackberry:good_control:*:*:*:*:*:*:*:*",{"vendor":154,"product":158,"version":159,"criteria":160,"vulnerable":4},"workspaces_server","7.0.1","cpe:2.3:a:blackberry:workspaces_server:7.0.1:*:*:*:*:*:*:*",{"vendor":154,"product":158,"version":162,"criteria":163,"vulnerable":4},"7.1.2","cpe:2.3:a:blackberry:workspaces_server:7.1.2:*:*:*:*:*:*:*",{"vendor":154,"product":158,"version":165,"criteria":166,"vulnerable":4},"8.1.0","cpe:2.3:a:blackberry:workspaces_server:8.1.0:*:*:*:*:*:*:*",{"vendor":154,"product":158,"version":143,"criteria":168,"vulnerable":4},"cpe:2.3:a:blackberry:workspaces_server:9.0:*:*:*:*:*:*:*",{"vendor":170,"product":171,"version":172,"criteria":173,"vulnerable":4},"netapp","data_availability_services","-","cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*",{"vendor":170,"product":175,"version":57,"criteria":176,"vulnerable":4},"oncommand_system_manager","cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*",35,[179,184,188,192,196,199,202,205,208,211,215,218,221,224,227,230,233,236,239,242,246,249,252,255,258,262,265,269,272,275,278,281,284,287,290,293,296,299,302,305,309,312,317,320,323,327,331,334,337,341],{"url":180,"source":181,"tags":182},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-03\u002Fmsg00025.html","Opensuse",[183],"Third Party Advisory",{"url":185,"source":181,"tags":186},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-05\u002Fmsg00002.html",[187,183],"Mailing List",{"url":189,"source":190,"tags":191},"http:\u002F\u002Fsupport.blackberry.com\u002Fkb\u002FarticleDetail?articleNumber=000062739","Blackberry",[183],{"url":193,"source":194,"tags":195},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr089dc67c0358a1556dd279c762c74f32d7a254a54836b7ee2d839d8e%40%3Cdev.tomee.apache.org%3E","Apache",[187],{"url":197,"source":194,"tags":198},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E",[187],{"url":200,"source":194,"tags":201},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr17aaa3a05b5b7fe9075613dd0c681efa60a4f8c8fbad152c61371b6e%40%3Cusers.tomcat.apache.org%3E",[187],{"url":203,"source":194,"tags":204},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr38a5b7943b9a62ecb853acc22ef08ff586a7b3c66e08f949f0396ab1%40%3Cusers.tomcat.apache.org%3E",[187],{"url":206,"source":194,"tags":207},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr43faacf64570b1d9a4bada407a5af3b2738b0c007b905f1b6b608c65%40%3Cusers.tomcat.apache.org%3E",[187],{"url":209,"source":194,"tags":210},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr47caef01f663106c2bb81d116b8380d62beac9e543dd3f3bc2c2beda%40%3Ccommits.tomee.apache.org%3E",[187],{"url":212,"source":194,"tags":213},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr4afa11e0464408e68f0e9560e90b185749363a66398b1491254f7864%40%3Cusers.tomcat.apache.org%3E",[214,187],"Issue Tracking",{"url":216,"source":194,"tags":217},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr4f86cb260196e5cfcbbe782822c225ddcc70f54560f14a8f11c6926f%40%3Cusers.tomcat.apache.org%3E",[187],{"url":219,"source":194,"tags":220},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr549b43509e387a42656f0641fa311bf27c127c244fe02007d5b8d6f6%40%3Cdev.tomcat.apache.org%3E",[187],{"url":222,"source":194,"tags":223},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr57f5e4ced436ace518a9e222fabe27fb785f09f5bf974814cc48ca97%40%3Ccommits.tomee.apache.org%3E",[187],{"url":225,"source":194,"tags":226},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr5e2f1201b92ee05a0527cfc076a81ea0c270be299b87895c0ddbe02b%40%3Cusers.tomcat.apache.org%3E",[187],{"url":228,"source":194,"tags":229},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr61f280a76902b594692f0b24a1dbf647bb5a4c197b9395e9a6796e7c%40%3Cusers.tomcat.apache.org%3E",[187],{"url":231,"source":194,"tags":232},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr6a5633cad1b560a1e51f5b425f02918bdf30e090fdf18c5f7c2617eb%40%3Ccommits.tomee.apache.org%3E",[187],{"url":234,"source":194,"tags":235},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr74328b178f9f37fe759dffbc9c1f2793e66d79d7a8a20d3836551794%40%3Cnotifications.ofbiz.apache.org%3E",[187],{"url":237,"source":194,"tags":238},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr75113652e46c4dee687236510649acfb70d2c63e074152049c3f399d%40%3Cnotifications.ofbiz.apache.org%3E",[187],{"url":240,"source":194,"tags":241},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr772335e6851ad33ddb076218fa4ff70de1bf398d5b43e2ddf0130e5d%40%3Cdev.tomcat.apache.org%3E",[214,187],{"url":243,"source":194,"tags":244},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr7c6f492fbd39af34a68681dbbba0468490ff1a97a1bd79c6a53610ef%40%3Cannounce.tomcat.apache.org%3E",[187,245],"Vendor Advisory",{"url":247,"source":194,"tags":248},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr856cdd87eda7af40b50278d6de80ee4b42d63adeb433a34a7bdaf9db%40%3Cnotifications.ofbiz.apache.org%3E",[187],{"url":250,"source":194,"tags":251},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr8f7484589454638af527182ae55ef5b628ba00c05c5b11887c922fb1%40%3Cnotifications.ofbiz.apache.org%3E",[187,245],{"url":253,"source":194,"tags":254},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922%40%3Cannounce.apache.org%3E",[187,245],{"url":256,"source":194,"tags":257},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr92d78655c068d0bc991d1edbdfb24f9c5134603e647cade1113d4e0a%40%3Cusers.tomee.apache.org%3E",[187],{"url":259,"source":194,"tags":260},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr9f119d9ce9239114022e13dbfe385b3de7c972f24f05d6dbd35c1a2f%40%3Cusers.tomcat.apache.org%3E",[187,261],"Patch",{"url":263,"source":194,"tags":264},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fra7092f7492569b39b04ec0decf52628ba86c51f15efb38f5853e2760%40%3Cnotifications.ofbiz.apache.org%3E",[187,245],{"url":266,"source":194,"tags":267},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frad36ec6a1ffc9e43266b030c22ceeea569243555d34fb4187ff08522%40%3Cnotifications.ofbiz.apache.org%3E",[268,187],"Exploit",{"url":270,"source":194,"tags":271},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed%40%3Cdev.tomcat.apache.org%3E",[187,261],{"url":273,"source":194,"tags":274},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frb2fc890bef23cbc7f343900005fe1edd3b091cf18dada455580258f9%40%3Cusers.tomcat.apache.org%3E",[214,187],{"url":276,"source":194,"tags":277},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frbdb1d2b651a3728f0ceba9e0853575b6f90296a94a71836a15f7364a%40%3Cdev.tomee.apache.org%3E",[187],{"url":279,"source":194,"tags":280},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc068e824654c4b8bd4f2490bec869e29edbfcd5dfe02d47cbf7433b2%40%3Cdev.tomee.apache.org%3E",[187],{"url":282,"source":194,"tags":283},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frcd5cd301e9e7e39f939baf2f5d58704750be07a5e2d3393e40ca7194%40%3Ccommits.tomee.apache.org%3E",[187],{"url":285,"source":194,"tags":286},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frce2af55f6e144ffcdc025f997eddceb315dfbc0b230e3d750a7f7425%40%3Cnotifications.ofbiz.apache.org%3E",[187],{"url":288,"source":194,"tags":289},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd0774c95699d5aeb5e16e9a600fb2ea296e81175e30a62094e27e3e7%40%3Ccommits.ofbiz.apache.org%3E",[187,261],{"url":291,"source":194,"tags":292},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd50baccd1bbb96c2327d5a8caa25a49692b3d68d96915bd1cfbb9f8b%40%3Cusers.tomcat.apache.org%3E",[214,187],{"url":294,"source":194,"tags":295},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fre5eecbe5bf967439bafeeaa85987b3a43f0e6efe06b6976ee768cde2%40%3Cusers.tomcat.apache.org%3E",[214,187],{"url":297,"source":194,"tags":298},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E",[187,245],{"url":300,"source":194,"tags":301},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf26663f42e7f1a1d1cac732469fb5e92c89908a48b61ec546dbb79ca%40%3Cbugs.httpd.apache.org%3E",[187],{"url":303,"source":194,"tags":304},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf992c5adf376294af31378a70aa8a158388a41d7039668821be28df3%40%3Ccommits.tomee.apache.org%3E",[187,245],{"url":306,"source":307,"tags":308},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F03\u002Fmsg00006.html","Debian",[183],{"url":310,"source":307,"tags":311},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F05\u002Fmsg00026.html",[183],{"url":313,"source":314,"tags":315},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F2XFLQB3O5QVP4ZBIPVIXBEZV7F2R7ZMS\u002F","Fedoraproject",[316],"Release Notes",{"url":318,"source":314,"tags":319},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FK3IPNHCKFVUKSHDTM45UL4Q765EHHTFG\u002F",[316],{"url":321,"source":314,"tags":322},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FL46WJIV6UV3FWA5O5YEY6XLA73RYD53B\u002F",[316],{"url":324,"source":325,"tags":326},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202003-43","Gentoo",[183],{"url":328,"source":329,"tags":330},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20200226-0002\u002F","Netapp",[183],{"url":332,"source":307,"tags":333},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2020\u002Fdsa-4673",[183],{"url":335,"source":307,"tags":336},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2020\u002Fdsa-4680",[183],{"url":338,"source":339,"tags":340},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2021.html","Oracle",[261,183],{"url":342,"source":339,"tags":343},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2020.html",[261,183],50,[346],{"id":347,"name":347,"description":348},"Unknown","NVD-CWE-Other",1,{"shortDescription":42,"requiredAction":42,"vulnerabilityName":42,"dateAdded":27},[],{"title":353,"metaDescription":354,"keywords":355,"canonicalUrl":356,"structuredData":357},"What is CVE-2020-1938? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-1938, a critical severity cyber security vulnerability from 2020. High exploit probability (99.3%). When using the Apache ...","CVE-2020-1938, CVE-2020-1938 vulnerability, CVE-2020-1938 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, apache security, fedoraproject security, oracle security, geode vulnerability, tomcat vulnerability, fedora vulnerability, agile_engineering_data_management vulnerability, agile_plm vulnerability","\u002Fwhat-is\u002Fcve-2020-1938",{"@context":358,"@type":359,"headline":353,"description":354,"datePublished":10,"dateModified":11,"author":360,"publisher":364,"about":368,"mainEntityOfPage":372,"articleSection":375,"keywords":376},"https:\u002F\u002Fschema.org","TechArticle",{"@type":361,"name":362,"url":363},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":361,"name":362,"url":363,"logo":365},{"@type":366,"url":367},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":369,"name":6,"description":370,"additionalType":371},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":373,"@id":374},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-1938","Cybersecurity","CVE-2020-1938, CVE-2020-1938 vulnerability, CVE-2020-1938 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[378,397,407,457,467,473,488],{"Operator":27,"Negate":27,"Nodes":379},[380],{"Operator":381,"Negate":45,"CPEMatch":382},"OR",[383,385,389,393],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":384,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8DD32C20-8B17-4197-9943-B8293D1C3BED",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":386,"VersionStartExcluding":27,"VersionStartIncluding":387,"VersionEndExcluding":388,"VersionEndIncluding":27},"E7D96045-5A8B-46DD-9F3B-F383F95597E6","7.0.0","7.0.100",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":390,"VersionStartExcluding":27,"VersionStartIncluding":391,"VersionEndExcluding":392,"VersionEndIncluding":27},"DE0EA2B0-2CDD-4F86-AE16-63C774803783","8.5.0","8.5.51",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":394,"VersionStartExcluding":27,"VersionStartIncluding":395,"VersionEndExcluding":396,"VersionEndIncluding":27},"50EFBDF6-932E-40DD-9229-5A9C239CC011","9.0.0","9.0.31",{"Operator":27,"Negate":27,"Nodes":398},[399],{"Operator":381,"Negate":45,"CPEMatch":400},[401,403,405],{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":402,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":404,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"80F0FA5D-8D3B-4C0E-81E2-87998286AF33",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":406,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"36D96259-24BD-44E2-96D9-78CE1D41F956",{"Operator":27,"Negate":27,"Nodes":408},[409],{"Operator":381,"Negate":45,"CPEMatch":410},[411,413,415,417,419,421,423,425,427,429,431,433,435,439,442,446,449,451,453,455],{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":412,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"80C9DBB8-3D50-4D5D-859A-B022EB7C2E64",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":414,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D14ABF04-E460-4911-9C6C-B7BCEFE68E9D",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":416,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"ED43772F-D280-42F6-A292-7198284D6FE7",{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":418,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C650FEDB-E903-4C2D-AD40-282AB5F2E3C2",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":420,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0C57FD3A-0CC1-4BA9-879A-8C4A40234162",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":422,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"698FB6D0-B26F-4760-9B9B-1C65FBFF2126",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":424,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4F1D64BC-17BF-4DAE-B5FC-BC41F9C12DFD",{"Vulnerable":4,"Criteria":98,"MatchCriteriaID":426,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0DB23B9A-571E-4B77-B432-23F3DC9B67D1",{"Vulnerable":4,"Criteria":102,"MatchCriteriaID":428,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F5F58398-0001-42FE-BD17-44F924955C3D",{"Vulnerable":4,"Criteria":106,"MatchCriteriaID":430,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"456AE11C-DD5B-4EA9-AA93-AAFC988830EB",{"Vulnerable":4,"Criteria":110,"MatchCriteriaID":432,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1A3DC116-2844-47A1-BEC2-D0675DD97148",{"Vulnerable":4,"Criteria":113,"MatchCriteriaID":434,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94",{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":436,"VersionStartExcluding":27,"VersionStartIncluding":437,"VersionEndExcluding":27,"VersionEndIncluding":438},"9A74FD5F-4FEA-4A74-8B92-72DFDE6BA464","17.1","17.3",{"Vulnerable":4,"Criteria":119,"MatchCriteriaID":440,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":441},"9A3BBE71-CA00-4F54-9210-FC7572C87CFB","4.0.12",{"Vulnerable":4,"Criteria":119,"MatchCriteriaID":443,"VersionStartExcluding":27,"VersionStartIncluding":444,"VersionEndExcluding":27,"VersionEndIncluding":445},"73573516-EDA0-4176-A3ED-2F7006C87F8E","8.0.0","8.0.20",{"Vulnerable":4,"Criteria":122,"MatchCriteriaID":447,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":448},"F510ED6D-7BF8-4548-BF0F-3CF926EB135E","20.5",{"Vulnerable":4,"Criteria":126,"MatchCriteriaID":450,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A58642E0-CA59-4DE6-A83C-F551FC621C32",{"Vulnerable":4,"Criteria":130,"MatchCriteriaID":452,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"AD848FE1-CFD7-490C-B008-DF3B30F3256F",{"Vulnerable":4,"Criteria":133,"MatchCriteriaID":454,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"630C8E99-FE49-486E-9003-40B82809B7A3",{"Vulnerable":4,"Criteria":136,"MatchCriteriaID":456,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C842DE9E-5E12-4295-AFA5-DEB5FEDE490A",{"Operator":27,"Negate":27,"Nodes":458},[459],{"Operator":381,"Negate":45,"CPEMatch":460},[461,463,465],{"Vulnerable":4,"Criteria":141,"MatchCriteriaID":462,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":144,"MatchCriteriaID":464,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":147,"MatchCriteriaID":466,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":27,"Negate":27,"Nodes":468},[469],{"Operator":381,"Negate":45,"CPEMatch":470},[471],{"Vulnerable":4,"Criteria":152,"MatchCriteriaID":472,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B620311B-34A3-48A6-82DF-6F078D7A4493",{"Operator":27,"Negate":27,"Nodes":474},[475],{"Operator":381,"Negate":45,"CPEMatch":476},[477,480,482,484,486],{"Vulnerable":4,"Criteria":156,"MatchCriteriaID":478,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":479},"F028AAEB-7536-4E9C-A2F6-0161191BEEF2","5.2.58.38",{"Vulnerable":4,"Criteria":160,"MatchCriteriaID":481,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6B8A0865-A3C5-40FB-86C1-DFD9BABC1D16",{"Vulnerable":4,"Criteria":163,"MatchCriteriaID":483,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D669A2CD-0BE2-4B90-BF94-58D69512FE94",{"Vulnerable":4,"Criteria":166,"MatchCriteriaID":485,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"284BD023-C583-4BA8-8EA9-7A153DCD45DD",{"Vulnerable":4,"Criteria":168,"MatchCriteriaID":487,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"834C9378-9BE8-4250-BCF0-43780F6A1EF7",{"Operator":27,"Negate":27,"Nodes":489},[490],{"Operator":381,"Negate":45,"CPEMatch":491},[492,494],{"Vulnerable":4,"Criteria":173,"MatchCriteriaID":493,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0EF46487-B64A-454E-AECC-D74B83170ACD",{"Vulnerable":4,"Criteria":176,"MatchCriteriaID":495,"VersionStartExcluding":27,"VersionStartIncluding":496,"VersionEndExcluding":27,"VersionEndIncluding":497},"34B80C9D-62AA-42FA-AB46-F8A414FCBE5E","3.0.0","3.1.3",[],[],{"lastModified":11,"cacheTime":501,"version":38},1793207464229,{"score":503,"band":48,"action":504,"scoredAt":505},89,"Emergency patch","2026-10-28T06:47:59.431942+00:00"]