CVE-2020-1732 – Soteria: security identity corruption across concurrent threads

https://notcve.org/view.php?id=CVE-2020-1732

04 May 2020 — A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request. Se encontró un fallo en Soteria versiones anteriores a la versión 1.0.1, en un modo en el que múltiples peticiones pueden ocurrir simultáneamente causan una corrupción de identidad de seguridad por medio de subproces... • https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1732 • CWE-20: Improper Input Validation CWE-284: Improper Access Control •