CVE:CVE-2020-10714
CNNVD:CNNVD-202004-2361
Red Hat WildFly Elytron是美国红帽（Red Hat）公司的一款用于应用程序服务器的安全框架。该产品支持配置服务器的管理访问权限等功能。
Red Hat WildFly Elytron 1.11.3.Final及之前版本中存在授权问题漏洞。攻击者可利用该漏洞实施会话固定攻击，影响数据的保密性和可完整性及系统的可用性。
solution:Upgrade redhat wildfly_elytron to a higher version than 1.11.3,and avoid the version (,1.11.3); Upgrade redhat codeready_studio to a higher version than 12.0,and avoid the version 12.0; Upgrade redhat descision_manager to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat jboss_fuse to a higher version than 7.0.0,and avoid the version 7.0.0; Upgrade redhat process_automation to a higher version than 7.0,and avoid the version 7.0; Upgrade netapp oncommand_insight to a higher version than -