← Vulnerability feed

Vulnerability record · CVE-2020-1745 · published 28 April 2020

CVE-2020-1745: Redhat undertow improper authorization vulnerability

Redhat · Undertow

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.

9.8 CVSS 3.1 Critical EPSS 5.0% · top 8.1% CWE-285 · Improper authorization
9.8CVSS 3.1 base score, v2 7.5
5.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
17 Jun 2026Last modified by NVD

Description

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1745 Issue TrackingThird Party Advisory
https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/ Not Applicable
https://security.netapp.com/advisory/ntap-20240216-0011/
https://www.cnvd.org.cn/webinfo/show/5415 Not Applicable
https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487 Not Applicable
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1745 Issue TrackingThird Party Advisory
https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/ Not Applicable
https://security.netapp.com/advisory/ntap-20240216-0011/
https://www.cnvd.org.cn/webinfo/show/5415 Not Applicable
https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487 Not Applicable

Track CVE-2020-1745 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-10212Redhat undertow sensitive information in log file vulnerabilityA flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to o…EPSS 1.9%9.8CVE-2019-3888Redhat undertow sensitive information in log file vulnerabilityA vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connector…EPSS 3.0%9.6CVE-2025-12543Redhat build of apache camel improper input validation vulnerabilityA flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to pr…EPSS 1.4%9.1CVE-2026-28369Redhat build of apache camel - hawtio http request smuggling vulnerabilityA flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly proce…EPSS 0.89%9.1CVE-2026-28367Redhat build of apache camel - hawtio http request smuggling vulnerabilityA flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for…EPSS 0.89%9.1CVE-2026-28368Redhat build of apache camel - hawtio http request smuggling vulnerabilityA flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed diffe…EPSS 0.89%8.1CVE-2020-1757Redhat undertow improper input validation vulnerabilityA flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.…EPSS 1.6%7.5CVE-2025-9784Redhat build of apache camel for spring boot allocation without limits vulnerabilityA flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, ref…EPSS 2.3%

Source: NIST National Vulnerability Database (record CVE-2020-1745), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.