PT-2020-5291 · Microsoft · Azure Sdk For Java

Published 2020-12-08 · Updated 2024-10-17 · CVE-2020-16971

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Azure SDK for Java (affected versions not specified)

Description The issue is related to a security feature bypass in the Azure SDK for Java, which can be exploited by a remote attacker to impact the confidentiality and integrity of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2021-00053

CVE-2020-16971

GHSA-8Q69-PW39-HPQH

Affected Products

Azure Sdk For Java

References · 23

• https://nvd.nist.gov/vuln/detail/CVE-2020-16971 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16971 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00053 · Security Note
• https://osv.dev/vulnerability/CVE-2020-16971 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8q69-pw39-hpqh · Vendor Advisory
• https://t.me/cibsecurity/18610 · Telegram Post
• https://t.me/cibsecurity/18441 · Telegram Post
• https://t.me/cibsecurity/18550 · Telegram Post
• https://t.me/cibsecurity/18650 · Telegram Post
• https://t.me/cibsecurity/18461 · Telegram Post
• https://t.me/cibsecurity/18669 · Telegram Post
• https://t.me/cibsecurity/18630 · Telegram Post
• https://t.me/cibsecurity/18501 · Telegram Post
• https://t.me/cibsecurity/18590 · Telegram Post
• https://t.me/cvenotify/98407 · Telegram Post