com.savoirtech.aetos:aetos (>=4.2.0.1 <=4.2.2), de.mhus.app.vault:vault-playground-assembly (>=7.2.0 <=7.3.0) +82 more potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (>=3.3.0 <=3.3.5)

org.apache.cxf:cxf-rt-management MAVEN version =3.3.0, =4.2.0.1, =7.2.0, =6.3.0, =1.2.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.7, =1.0.7, =4.2.11.hyte-42116, =4.2.11.hyte-42116, =4.2.11.hyte-42116, =4.2.11.hyte-42119 and more Source cves: CVE-2020-1954 Source advisory:...

Information Disclosure

cxf-rt-management is vulnerable to information disclosure. The vulnerability exists as registry rebind was not prevented, allowing another instance on the same host to connect to the registry and rebind the entry to another server...