[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$finCKxY0hjQgn4nZnDR1ojcswObwzWbq0RxDS17wAFco":3,"g5a-risk:CVE-2020-27846":192},{"success":4,"data":5,"meta":190},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":27,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":72,"references":73,"referencesCount":106,"weaknesses":107,"weaknessesCount":116,"isActivelyExploited":117,"cisaInfo":27,"otxData":27,"relatedBlogPosts":118,"seoMetadata":119,"configurations":144,"relatedVendorCves":188,"notableEvents":189},"CVE-2020-27846","What is CVE-2020-27846?","A signature verification vulnerability exists in crewjam\u002Fsaml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","A signature verification vulnerability exists in crewjam\u002Fsaml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulne...","2020-12-21T16:15:13.067","2023-11-07T03:21:03.683",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":36,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,0.04931,[37,37,37,37,37,37,37],"Critical",[41,45,49,54,57,60,64,69],{"vendor":42,"product":42,"version":43,"criteria":44,"vulnerable":4},"grafana","*","cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",{"vendor":46,"product":47,"version":43,"criteria":48,"vulnerable":4},"saml_project","saml","cpe:2.3:a:saml_project:saml:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"redhat","openshift_container_platform","3.11","cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":55,"criteria":56,"vulnerable":4},"4.0","cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",{"vendor":50,"product":58,"version":33,"criteria":59,"vulnerable":4},"openshift_service_mesh","cpe:2.3:a:redhat:openshift_service_mesh:2.0:*:*:*:*:*:*:*",{"vendor":50,"product":61,"version":62,"criteria":63,"vulnerable":4},"enterprise_linux","8.0","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",{"vendor":65,"product":66,"version":67,"criteria":68,"vulnerable":4},"fedoraproject","fedora","32","cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",{"vendor":65,"product":66,"version":70,"criteria":71,"vulnerable":4},"33","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",8,[74,81,85,90,94,97,102],{"url":75,"source":76,"tags":77},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1907670","Red Hat",[78,79,80],"Issue Tracking","Patch","Third Party Advisory",{"url":82,"source":83,"tags":84},"https:\u002F\u002Fgithub.com\u002Fcrewjam\u002Fsaml\u002Fsecurity\u002Fadvisories\u002FGHSA-4hq8-gmxx-h6w9","GitHub",[80],{"url":86,"source":87,"tags":88},"https:\u002F\u002Fgrafana.com\u002Fblog\u002F2020\u002F12\u002F17\u002Fgrafana-6.7.5-7.2.3-and-7.3.6-released-with-important-security-fix-for-grafana-enterprise\u002F","Grafana",[89],"Vendor Advisory",{"url":91,"source":92,"tags":93},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F3YUTKIRWT6TWU7DS6GF3EOANVQBFQZYI\u002F","Fedoraproject",[],{"url":95,"source":92,"tags":96},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FICP3YRY2VUCNCF2VFUSK77ZMRIC77FEM\u002F",[],{"url":98,"source":99,"tags":100},"https:\u002F\u002Fmattermost.com\u002Fblog\u002Fcoordinated-disclosure-go-xml-vulnerabilities\u002F","Mattermost",[101,80],"Exploit",{"url":103,"source":104,"tags":105},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20210205-0002\u002F","Netapp",[80],7,[108],{"id":109,"name":110,"description":111,"extendedDescription":112,"status":113,"abstraction":114,"structure":115},"CWE-115","Misinterpretation of Input","The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.","","Incomplete","Base","Simple",1,false,[],{"title":120,"metaDescription":121,"keywords":122,"canonicalUrl":123,"structuredData":124},"What is CVE-2020-27846? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-27846, a critical severity cyber security vulnerability from 2020. A signature verification vulnerability exists in crewja...","CVE-2020-27846, CVE-2020-27846 vulnerability, CVE-2020-27846 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, grafana security, saml_project security, redhat security, fedoraproject security, grafana vulnerability, saml vulnerability, openshift_container_platform vulnerability, openshift_service_mesh vulnerability","\u002Fwhat-is\u002Fcve-2020-27846",{"@context":125,"@type":126,"headline":120,"description":121,"datePublished":10,"dateModified":11,"author":127,"publisher":131,"about":135,"mainEntityOfPage":139,"articleSection":142,"keywords":143},"https:\u002F\u002Fschema.org","TechArticle",{"@type":128,"name":129,"url":130},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":128,"name":129,"url":130,"logo":132},{"@type":133,"url":134},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":136,"name":6,"description":137,"additionalType":138},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":140,"@id":141},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-27846","Cybersecurity","CVE-2020-27846, CVE-2020-27846 vulnerability, CVE-2020-27846 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[145,161,168,180],{"Operator":27,"Negate":27,"Nodes":146},[147],{"Operator":148,"Negate":27,"CPEMatch":149},"OR",[150,153,157],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":152,"VersionEndIncluding":27},"872A1196-96C5-40DA-941B-FF88E45A6419","6.7.5",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":154,"VersionStartExcluding":27,"VersionStartIncluding":155,"VersionEndExcluding":156,"VersionEndIncluding":27},"15AA35B7-6A59-429F-AAC2-B8DB3D4C7883","7.0.0","7.2.3",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":158,"VersionStartExcluding":27,"VersionStartIncluding":159,"VersionEndExcluding":160,"VersionEndIncluding":27},"F1FAD0D9-D1D2-4EB2-BB5A-63C76CA5593E","7.3.0","7.3.6",{"Operator":27,"Negate":27,"Nodes":162},[163],{"Operator":148,"Negate":27,"CPEMatch":164},[165],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":166,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":167,"VersionEndIncluding":27},"2A60AF8E-5856-4747-9AD5-BD733E97B982","0.4.3",{"Operator":27,"Negate":27,"Nodes":169},[170],{"Operator":148,"Negate":27,"CPEMatch":171},[172,174,176,178],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":173,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2F87326E-0B56-4356-A889-73D026DB1D4B",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":175,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"932D137F-528B-4526-9A89-CD59FA1AB0FE",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":177,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A76A2BCE-4AAE-46D7-93D6-2EDE0FC83145",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":179,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F4CFF558-3C47-480D-A2F0-BABF26042943",{"Operator":27,"Negate":27,"Nodes":181},[182],{"Operator":148,"Negate":27,"CPEMatch":183},[184,186],{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":185,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"36D96259-24BD-44E2-96D9-78CE1D41F956",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":187,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E460AA51-FCDA-46B9-AE97-E6676AA5E194",[],[],{"lastModified":11,"cacheTime":191,"version":33},1792352490676,{"score":193,"band":194,"action":195,"scoredAt":196},56,"Medium","Plan remediation","2026-10-16T06:50:06.79482+00:00"]