CVE-2020-14348: redhat amq_online Uncaught Exception
Vulnerability summary
CVE-2020-14348 is a medium (CVSS 4.3) Uncaught Exception vulnerability in redhat amq_online. EPSS estimates a 0.81% chance of exploitation in the next 30 days, higher than 56.1% of scored vulnerabilities.
Timeline
- 16-09-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operate properly, such as the failure of provisioning and the failure of creating addresses, though this does not impact upon already existing messaging clients or brokers.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.81%
Chance of exploitation in the next 30 days
Percentile
56%
Versus all other CVEs
30-day change
0.00 pp
From 0.81% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-248Uncaught ExceptionAn exception is thrown from a function, but it is not caught.
- CWE-754Improper Check for Unusual or Exceptional ConditionsThe product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
Affected systems
Redhat1 product
- amq_online< 1.5.2
1 vendor · 1 product