{"action":"Upgrade org.wildfly.security:wildfly-elytron to 1.6.8 or later.","affected":[{"fixed":"1.6.8","introduced":"0"}],"component":"org.wildfly.security:wildfly-elytron","cve_ids":["CVE-2020-1748"],"ecosystem":"Maven","epss":0.01438,"exploited":false,"fixed_versions":["1.6.8"],"ghsa_id":"GHSA-qgrq-cx4c-2rmm","id":"tcs_01M5N99HCGS7YRZ3R10834X36S","modified_at":"2026-09-10T03:49:17.166221123Z","published_at":"2022-02-15T01:39:27Z","references":["https://osv.dev/vulnerability/GHSA-qgrq-cx4c-2rmm","https://nvd.nist.gov/vuln/detail/CVE-2020-1748","https://bugzilla.redhat.com/show_bug.cgi?id=1807707","https://security.netapp.com/advisory/ntap-20201001-0005"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qgrq-cx4c-2rmm","url":"https://osv.dev/vulnerability/GHSA-qgrq-cx4c-2rmm"}],"summary":"Incorrect Authorization in WildFly Elytron"}