GHSA-8q69-pw39-hpqh
Azure SDK for Java Security Feature Bypass Vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.microsoft.azure:azure-eventhubs | < 3.2.1 | 3.2.1 |
| Maven | com.azure:azure-core-amqp | < 1.6.0 | 1.6.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Azure SDK for Java Security Feature Bypass Vulnerability
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2020-16971
- https://azure.github.io/azure-sdk/releases/2020-10/index.html
- https://azure.github.io/azure-sdk/releases/2020-10/java.html
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16971
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16971