[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDo1aL7qZkcn4-s_eV4XdA7XvLAcVYrSPF_88L98vlp8":3,"g5a-risk:CVE-2020-5404":121},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":51,"epssPercentile":27,"epssTimeSeries":52,"severity":53,"affectedProducts":54,"affectedProductsCount":60,"references":61,"referencesCount":60,"weaknesses":67,"weaknessesCount":60,"isActivelyExploited":76,"cisaInfo":27,"otxData":27,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":117,"notableEvents":118},"CVE-2020-5404","What is CVE-2020-5404?","The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a different domain. In order for this to happen, the HttpClient must have been explicitly configured to follow redirects.","The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak ...","2020-03-03T18:15:12.157","2021-07-07T14:15:08.213",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":42,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":24,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","HIGH","LOW","NONE","UNCHANGED","MEDIUM",null,1.6,4.2,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":40,"ImpactScore":41},"security@pivotal.io","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":37,"Scope":38,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":39,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:L\u002FA:N","REQUIRED","CHANGED",6.5,1.3,4.7,[43],{"Source":17,"Type":18,"CVSSData":44,"BaseSeverity":26,"ExploitabilityScore":50,"ImpactScore":49,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":45,"VectorString":46,"AccessVector":21,"AccessComplexity":26,"Authentication":47,"ConfidentialityImpact":48,"IntegrityImpact":48,"AvailabilityImpact":24,"BaseScore":49,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:N","SINGLE","PARTIAL",4.9,6.8,0.00653,[51,51,51,51,51,51,51],"Medium",[55],{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"pivotal","reactor_netty","*","cpe:2.3:a:pivotal:reactor_netty:*:*:*:*:*:*:*:*",1,[62],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fpivotal.io\u002Fsecurity\u002Fcve-2020-5404","Pivotal",[66],"Vendor Advisory",[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete","Class","Simple",false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2020-5404? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-5404, a medium severity cyber security vulnerability from 2020. The HttpClient from Reactor Netty, versions 0.9.x prior to...","CVE-2020-5404, CVE-2020-5404 vulnerability, CVE-2020-5404 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, pivotal security, reactor_netty vulnerability","\u002Fwhat-is\u002Fcve-2020-5404",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-5404","Cybersecurity","CVE-2020-5404, CVE-2020-5404 vulnerability, CVE-2020-5404 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":27,"Negate":27,"Nodes":105},[106],{"Operator":107,"Negate":27,"CPEMatch":108},"OR",[109,113],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":110,"VersionStartExcluding":27,"VersionStartIncluding":111,"VersionEndExcluding":27,"VersionEndIncluding":112},"D17BE00C-FA7A-4024-AB15-5D12D1394CB7","0.8.0","0.8.15",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":114,"VersionStartExcluding":27,"VersionStartIncluding":115,"VersionEndExcluding":27,"VersionEndIncluding":116},"F4298A26-4A66-4528-9A83-6C71739184CE","0.9.0","0.9.4",[],[],{"lastModified":11,"cacheTime":120,"version":45},1792371319803,{"score":122,"band":123,"action":124,"scoredAt":125},19,"Info","Track","2026-10-16T06:47:58.641302+00:00"]