[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDVI_ajSlQ16PBy2q7WnnV5wqTEyfpiPjdjW5xdBmMbA":3,"g5a-risk:CVE-2020-1745":130},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":55,"references":56,"referencesCount":80,"weaknesses":81,"weaknessesCount":55,"isActivelyExploited":90,"cisaInfo":27,"otxData":27,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":126,"notableEvents":127},"CVE-2020-1745","What is CVE-2020-1745?","A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.","A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and befo...","2020-04-28T15:15:13.037","2024-02-16T13:15:09.207",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":37,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":36},"secalert@redhat.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":35,"BaseSeverity":25,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":22,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",8.6,4.7,[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":25,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.04957,[46,46,46,46,46,46,46],"Critical",[50],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"redhat","undertow","*","cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",1,[57,63,68,72,76],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2020-1745","Red Hat",[61,62],"Issue Tracking","Third Party Advisory",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fmeterpreter.org\u002Fcve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert\u002F","Meterpreter",[67],"Not Applicable",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240216-0011\u002F","Netapp",[],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fwww.cnvd.org.cn\u002Fwebinfo\u002Fshow\u002F5415","Org",[67],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fwww.tenable.com\u002Fblog\u002Fcve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487","Tenable",[67],5,[82],{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":89},"CWE-285","Improper Authorization","The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are not applied consistently - or not at all - users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Draft","Class","Simple",false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2020-1745? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-1745, a critical severity cyber security vulnerability from 2020. A file inclusion vulnerability was found in the AJP conn...","CVE-2020-1745, CVE-2020-1745 vulnerability, CVE-2020-1745 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, redhat security, undertow vulnerability","\u002Fwhat-is\u002Fcve-2020-1745",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-1745","Cybersecurity","CVE-2020-1745, CVE-2020-1745 vulnerability, CVE-2020-1745 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":27,"Negate":27,"Nodes":119},[120],{"Operator":121,"Negate":27,"CPEMatch":122},"OR",[123],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":124,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":125},"3C8F458A-06B7-474B-9C5C-756F893886D1","2.0.29",[],[],{"lastModified":11,"cacheTime":129,"version":40},1792248368754,{"score":131,"band":132,"action":133,"scoredAt":134},61,"Medium","Plan remediation","2026-10-16T06:48:33.032695+00:00"]