[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2020-1759":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":184,"aliases":185,"duplicate_of":9,"upstream":186,"downstream":187,"duplicates":198,"related":199,"reserved_at":9,"published_at":202,"modified_at":203,"state":204,"summary":205,"references_raw":214,"kevs":235,"epss":236,"epss_history":239,"metrics":497,"affected":513},"CVE-2020-1759","A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.",null,[11,177],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-330","Use of Insufficiently Random Values","The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.","weakness","Stable","Class","High",[20,145,173],{"id":21,"name":22,"techniques":23},"CAPEC-112","Brute Force",[24],{"id":25,"name":22,"tactics":26,"countermeasures":30},"T1110",[27],{"id":28,"name":29},"TA0031","Credential Access",[31,36,40,44,48,52,56,60,64,68,72,76,80,84,89,93,98,103,107,111,115,119,123,127,131,136,141],{"id":32,"name":33,"tactic":34},"D3-CCSA","Credential Compromise Scope Analysis",{"name":35},"Detect",{"id":37,"name":38,"tactic":39},"D3-AEM","Application Exception Monitoring",{"name":35},{"id":41,"name":42,"tactic":43},"D3-OPM","Operational Process Monitoring",{"name":35},{"id":45,"name":46,"tactic":47},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":35},{"id":49,"name":50,"tactic":51},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":35},{"id":53,"name":54,"tactic":55},"D3-CSPP","Client-server Payload Profiling",{"name":35},{"id":57,"name":58,"tactic":59},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":35},{"id":61,"name":62,"tactic":63},"D3-NTSA","Network Traffic Signature Analysis",{"name":35},{"id":65,"name":66,"tactic":67},"D3-APCA","Application Protocol Command Analysis",{"name":35},{"id":69,"name":70,"tactic":71},"D3-NTCD","Network Traffic Community Deviation",{"name":35},{"id":73,"name":74,"tactic":75},"D3-RTSD","Remote Terminal Session Detection",{"name":35},{"id":77,"name":78,"tactic":79},"D3-CAA","Connection Attempt Analysis",{"name":35},{"id":81,"name":82,"tactic":83},"D3-ANAA","Administrative Network Activity Analysis",{"name":35},{"id":85,"name":86,"tactic":87},"D3-CR","Credential Revocation",{"name":88},"Evict",{"id":90,"name":91,"tactic":92},"D3-ANCI","Authentication Cache Invalidation",{"name":88},{"id":94,"name":95,"tactic":96},"D3-DUC","Decoy User Credential",{"name":97},"Deceive",{"id":99,"name":100,"tactic":101},"D3-CH","Credential Hardening",{"name":102},"Harden",{"id":104,"name":105,"tactic":106},"D3-MFA","Multi-factor Authentication",{"name":102},{"id":108,"name":109,"tactic":110},"D3-CRO","Credential Rotation",{"name":102},{"id":112,"name":113,"tactic":114},"D3-PR","Password Rotation",{"name":102},{"id":116,"name":117,"tactic":118},"D3-PWA","Password Authentication",{"name":102},{"id":120,"name":121,"tactic":122},"D3-CDP","Change Default Password",{"name":102},{"id":124,"name":125,"tactic":126},"D3-SPP","Strong Password Policy",{"name":102},{"id":128,"name":129,"tactic":130},"D3-OTP","One-time Password",{"name":102},{"id":132,"name":133,"tactic":134},"D3-RIC","Reissue Credential",{"name":135},"Restore",{"id":137,"name":138,"tactic":139},"D3-CTS","Credential Transmission Scoping",{"name":140},"Isolate",{"id":142,"name":143,"tactic":144},"D3-NTF","Network Traffic Filtering",{"name":140},{"id":146,"name":147,"techniques":148},"CAPEC-485","Signature Spoofing by Key Recreation",[149],{"id":150,"name":151,"tactics":152,"countermeasures":154},"T1552.004","Private Keys",[153],{"id":28,"name":29},[155,157,159,161,163,165,167,169,171],{"id":32,"name":33,"tactic":156},{"name":35},{"id":85,"name":86,"tactic":158},{"name":88},{"id":90,"name":91,"tactic":160},{"name":88},{"id":94,"name":95,"tactic":162},{"name":97},{"id":99,"name":100,"tactic":164},{"name":102},{"id":104,"name":105,"tactic":166},{"name":102},{"id":108,"name":109,"tactic":168},{"name":102},{"id":132,"name":133,"tactic":170},{"name":135},{"id":137,"name":138,"tactic":172},{"name":140},{"id":174,"name":175,"techniques":176},"CAPEC-59","Session Credential Falsification through Prediction",[],{"_key":178,"id":178,"name":179,"description":180,"type":15,"status":181,"abstraction":182,"likelihood_of_exploit":18,"capec":183},"CWE-323","Reusing a Nonce, Key Pair in Encryption","Nonces should be used for the present occasion and only once.","Incomplete","Base",[],[],[],[],[188,190,192,194,196],{"_key":189},"RHBA-2020:4144",{"_key":191},"UBUNTU-CVE-2020-1759",{"_key":193},"SUSE-SU-2020:0930-1",{"_key":195},"OPENSUSE-SU-2020:0494-1",{"_key":197},"DEBIAN-CVE-2020-1759",[],[200,201],{"_key":193},{"_key":195},"2020-04-13T12:04:04.000Z","2024-08-04T06:46:30.894Z","Modified",{"cisa_kev":206,"cisa_ransomware":206,"cisa_vendor":9,"epss_severity":207,"epss_score":208,"severity":209,"severity_score":210,"severity_version":211,"severity_source":212,"severity_vector":213,"severity_status":204},false,"low",0.00409,"medium",6.8,"v3.1","nvd","CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",[215,224,229],{"url":216,"sources":217,"tags":219},"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1759",[218,212],"cve.org",[220,221,222,223],"X Refsource CONFIRM","Issue Tracking","Patch","Vendor Advisory",{"url":225,"sources":226,"tags":227},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE/",[218,212],[223,228],"X Refsource FEDORA",{"url":230,"sources":231,"tags":232},"https://security.gentoo.org/glsa/202105-39",[218,212],[223,233,234],"X Refsource GENTOO","Third Party Advisory",[],{"date":237,"score":208,"percentile":238},"2026-06-04",0.61603,[240,244,247,250,253,256,258,261,264,267,270,273,276,279,281,285,288,291,294,297,300,303,306,309,312,314,317,320,323,326,329,332,335,338,341,344,347,350,353,356,359,362,365,367,370,372,375,378,381,384,386,389,392,395,398,401,403,406,408,411,414,417,420,423,425,428,431,434,437,440,443,446,449,451,454,457,460,462,465,467,470,472,475,478,480,483,486,488,491,494],{"date":241,"score":242,"percentile":243},"2025-11-04",0.00412,0.60727,{"date":245,"score":242,"percentile":246},"2025-11-05",0.60714,{"date":248,"score":242,"percentile":249},"2025-11-06",0.6072,{"date":251,"score":242,"percentile":252},"2025-11-07",0.60734,{"date":254,"score":242,"percentile":255},"2025-11-08",0.60737,{"date":257,"score":242,"percentile":252},"2025-11-09",{"date":259,"score":242,"percentile":260},"2025-11-10",0.60711,{"date":262,"score":242,"percentile":263},"2025-11-11",0.60726,{"date":265,"score":242,"percentile":266},"2025-11-12",0.60751,{"date":268,"score":242,"percentile":269},"2025-11-13",0.60759,{"date":271,"score":242,"percentile":272},"2025-11-14",0.60768,{"date":274,"score":242,"percentile":275},"2025-11-15",0.60758,{"date":277,"score":242,"percentile":278},"2025-11-16",0.60746,{"date":280,"score":242,"percentile":278},"2025-11-17",{"date":282,"score":283,"percentile":284},"2025-11-18",0.00331,0.52973,{"date":286,"score":283,"percentile":287},"2025-11-19",0.52988,{"date":289,"score":283,"percentile":290},"2025-11-20",0.52974,{"date":292,"score":242,"percentile":293},"2025-11-21",0.60756,{"date":295,"score":242,"percentile":296},"2025-11-22",0.60757,{"date":298,"score":242,"percentile":299},"2025-11-23",0.6074,{"date":301,"score":242,"percentile":302},"2025-11-24",0.60738,{"date":304,"score":242,"percentile":305},"2025-11-25",0.60742,{"date":307,"score":242,"percentile":308},"2025-11-26",0.60743,{"date":310,"score":242,"percentile":311},"2025-11-27",0.60749,{"date":313,"score":242,"percentile":263},"2025-11-28",{"date":315,"score":242,"percentile":316},"2025-11-29",0.60697,{"date":318,"score":242,"percentile":319},"2025-11-30",0.60688,{"date":321,"score":242,"percentile":322},"2025-12-01",0.60835,{"date":324,"score":242,"percentile":325},"2025-12-02",0.60848,{"date":327,"score":242,"percentile":328},"2025-12-03",0.60852,{"date":330,"score":242,"percentile":331},"2025-12-04",0.60685,{"date":333,"score":242,"percentile":334},"2025-12-05",0.60695,{"date":336,"score":242,"percentile":337},"2025-12-06",0.60686,{"date":339,"score":242,"percentile":340},"2025-12-07",0.6068,{"date":342,"score":242,"percentile":343},"2025-12-08",0.60683,{"date":345,"score":242,"percentile":346},"2025-12-09",0.60717,{"date":348,"score":242,"percentile":349},"2025-12-10",0.60763,{"date":351,"score":242,"percentile":352},"2025-12-11",0.60782,{"date":354,"score":242,"percentile":355},"2025-12-12",0.60797,{"date":357,"score":242,"percentile":358},"2025-12-13",0.60799,{"date":360,"score":242,"percentile":361},"2025-12-14",0.60794,{"date":363,"score":242,"percentile":364},"2025-12-15",0.60771,{"date":366,"score":242,"percentile":361},"2025-12-16",{"date":368,"score":242,"percentile":369},"2025-12-17",0.6081,{"date":371,"score":242,"percentile":328},"2025-12-18",{"date":373,"score":242,"percentile":374},"2025-12-19",0.6086,{"date":376,"score":242,"percentile":377},"2025-12-20",0.60859,{"date":379,"score":242,"percentile":380},"2025-12-21",0.60845,{"date":382,"score":242,"percentile":383},"2025-12-22",0.60838,{"date":385,"score":242,"percentile":328},"2025-12-23",{"date":387,"score":242,"percentile":388},"2025-12-24",0.60863,{"date":390,"score":242,"percentile":391},"2025-12-25",0.60895,{"date":393,"score":242,"percentile":394},"2025-12-26",0.6089,{"date":396,"score":242,"percentile":397},"2025-12-27",0.60937,{"date":399,"score":242,"percentile":400},"2025-12-28",0.60866,{"date":402,"score":242,"percentile":377},"2025-12-29",{"date":404,"score":242,"percentile":405},"2025-12-30",0.60873,{"date":407,"score":242,"percentile":391},"2025-12-31",{"date":409,"score":242,"percentile":410},"2026-01-01",0.61076,{"date":412,"score":242,"percentile":413},"2026-01-02",0.61063,{"date":415,"score":242,"percentile":416},"2026-01-03",0.61061,{"date":418,"score":242,"percentile":419},"2026-01-04",0.6087,{"date":421,"score":242,"percentile":422},"2026-01-05",0.60857,{"date":424,"score":242,"percentile":419},"2026-01-06",{"date":426,"score":242,"percentile":427},"2026-01-07",0.60894,{"date":429,"score":242,"percentile":430},"2026-01-08",0.6092,{"date":432,"score":242,"percentile":433},"2026-01-09",0.60921,{"date":435,"score":242,"percentile":436},"2026-01-10",0.60915,{"date":438,"score":242,"percentile":439},"2026-01-11",0.60898,{"date":441,"score":242,"percentile":442},"2026-01-12",0.60876,{"date":444,"score":242,"percentile":445},"2026-01-13",0.6084,{"date":447,"score":242,"percentile":448},"2026-01-14",0.6088,{"date":450,"score":242,"percentile":448},"2026-01-15",{"date":452,"score":242,"percentile":453},"2026-01-16",0.60902,{"date":455,"score":242,"percentile":456},"2026-01-17",0.60896,{"date":458,"score":242,"percentile":459},"2026-01-18",0.60893,{"date":461,"score":242,"percentile":448},"2026-01-19",{"date":463,"score":242,"percentile":464},"2026-01-20",0.60892,{"date":466,"score":242,"percentile":439},"2026-01-21",{"date":468,"score":242,"percentile":469},"2026-01-22",0.60901,{"date":471,"score":242,"percentile":397},"2026-01-23",{"date":473,"score":242,"percentile":474},"2026-01-24",0.60944,{"date":476,"score":242,"percentile":477},"2026-01-25",0.6091,{"date":479,"score":242,"percentile":469},"2026-01-26",{"date":481,"score":242,"percentile":482},"2026-01-27",0.60906,{"date":484,"score":242,"percentile":485},"2026-01-28",0.60919,{"date":487,"score":242,"percentile":430},"2026-01-29",{"date":489,"score":242,"percentile":490},"2026-01-30",0.60924,{"date":492,"score":242,"percentile":493},"2026-01-31",0.60929,{"date":495,"score":242,"percentile":496},"2026-02-01",0.61056,[498,505],{"source":218,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":499,"cvss_v4_0":9},{"baseScore":500,"baseSeverity":501,"vectorString":502,"impactScore":503,"exploitabilityScore":504},6.4,"MEDIUM","CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",8.7,3.1,{"source":212,"cvss_v2_0":506,"cvss_v3_0":9,"cvss_v3_1":511,"cvss_v4_0":9},{"baseScore":507,"baseSeverity":9,"vectorString":508,"impactScore":509,"exploitabilityScore":510},5.8,"AV:N/AC:M/Au:N/C:P/I:P/A:N",4.9,8.6,{"baseScore":210,"baseSeverity":501,"vectorString":213,"impactScore":503,"exploitabilityScore":512},4.1,[514,522,532,539,544,549],{"ecosystem":9,"name":515,"vendor":516,"product":515,"cpe_part":517,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":518},"fedora","fedoraproject","o",[519],{"version":520,"is_range":206,"range_type":521,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31","cpe",{"ecosystem":9,"name":523,"vendor":524,"product":523,"cpe_part":525,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":526},"ceph","linuxfoundation","a",[527],{"version":528,"is_range":529,"range_type":521,"version_start":9,"version_start_type":9,"version_end":530,"version_end_type":531,"fixed_in":9},"lt14.2.21",true,"14.2.21","excluding",{"ecosystem":9,"name":533,"vendor":534,"product":535,"cpe_part":525,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":536},"ceph storage","redhat","ceph_storage",[537],{"version":538,"is_range":206,"range_type":521,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.0",{"ecosystem":9,"name":540,"vendor":534,"product":540,"cpe_part":525,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":541},"openshift",[542],{"version":543,"is_range":206,"range_type":521,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.2",{"ecosystem":9,"name":545,"vendor":534,"product":545,"cpe_part":525,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":546},"openstack",[547],{"version":548,"is_range":206,"range_type":521,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"15",{"ecosystem":9,"name":523,"vendor":550,"product":523,"cpe_part":525,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":551},"the ceph project",[552,555],{"version":553,"is_range":206,"range_type":218,"version_start":553,"version_start_type":554,"version_end":553,"version_end_type":554,"fixed_in":9},"Red Hat Ceph Storage 4","including",{"version":556,"is_range":206,"range_type":218,"version_start":556,"version_start_type":554,"version_end":556,"version_end_type":554,"fixed_in":9},"Red Hat Openshift Container Storage 4.2"]