Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-552m-7eh3-dbd8
Summaryhttpd: allow connecting via SSL to a backend worker when the backend keystore file's ID is 'unknown'
Aliases
0
alias CVE-2020-25680
Fixed_packages
Affected_packages
0
url pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-104.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-104.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-104.jbcs%3Farch=el6
1
url pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-104.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-104.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-104.jbcs%3Farch=el7
2
url pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-75.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-75.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-75.jbcs%3Farch=el7
3
url pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-75.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-75.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-75.jbcs%3Farch=el6
4
url pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-38.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-38.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-38.jbcs%3Farch=el7
5
url pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-38.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-38.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-38.jbcs%3Farch=el6
6
url pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-44.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-44.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-44.jbcs%3Farch=el7
7
url pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-44.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-44.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-44.jbcs%3Farch=el6
8
url pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-64.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-64.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-64.jbcs%3Farch=el7
9
url pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-64.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-64.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-64.jbcs%3Farch=el6
10
url pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-53.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-53.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-53.jbcs%3Farch=el6
11
url pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-53.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-53.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-53.jbcs%3Farch=el7
12
url pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-11.Final_redhat_2.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-11.Final_redhat_2.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-11.Final_redhat_2.jbcs%3Farch=el6
13
url pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-11.Final_redhat_2.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-11.Final_redhat_2.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-11.Final_redhat_2.jbcs%3Farch=el7
14
url pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-11.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-11.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-11.jbcs%3Farch=el6
15
url pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-11.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-11.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-11.jbcs%3Farch=el7
16
url pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-10.redhat_1.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-10.redhat_1.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-10.redhat_1.jbcs%3Farch=el6
17
url pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-10.redhat_1.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-10.redhat_1.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-10.redhat_1.jbcs%3Farch=el7
18
url pkg:rpm/redhat/jbcs-httpd24-mod_md@1:2.0.8-30.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-mod_md@1:2.0.8-30.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_md@1:2.0.8-30.jbcs%3Farch=el7
19
url pkg:rpm/redhat/jbcs-httpd24-mod_md@1:2.0.8-30.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-mod_md@1:2.0.8-30.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_md@1:2.0.8-30.jbcs%3Farch=el6
20
url pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-57.GA.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-57.GA.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-57.GA.jbcs%3Farch=el6
21
url pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-57.GA.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-57.GA.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-57.GA.jbcs%3Farch=el7
22
url pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-34.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-34.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-34.jbcs%3Farch=el7
23
url pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-34.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-34.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-34.jbcs%3Farch=el6
24
url pkg:rpm/redhat/jbcs-httpd24-openssl@1:1.1.1c-32.jbcs?arch=el6
purl pkg:rpm/redhat/jbcs-httpd24-openssl@1:1.1.1c-32.jbcs?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-openssl@1:1.1.1c-32.jbcs%3Farch=el6
25
url pkg:rpm/redhat/jbcs-httpd24-openssl@1:1.1.1c-32.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-openssl@1:1.1.1c-32.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-openssl@1:1.1.1c-32.jbcs%3Farch=el7
26
url pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-1.jbcs?arch=el7
purl pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-1.jbcs?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-552m-7eh3-dbd8
1
vulnerability VCID-ac6r-spds-qbf5
2
vulnerability VCID-eqss-dzdc-tkbj
3
vulnerability VCID-t67v-c4gx-ukbj
4
vulnerability VCID-yz3c-arnr-y3cs
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-1.jbcs%3Farch=el7
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25680.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25680.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25680
reference_id
reference_type
scores
0
value 0.00079
scoring_system epss
scoring_elements 0.23323
published_at 2026-04-01T12:55:00Z
1
value 0.00079
scoring_system epss
scoring_elements 0.23497
published_at 2026-04-02T12:55:00Z
2
value 0.00079
scoring_system epss
scoring_elements 0.23533
published_at 2026-04-04T12:55:00Z
3
value 0.00079
scoring_system epss
scoring_elements 0.23317
published_at 2026-04-07T12:55:00Z
4
value 0.00079
scoring_system epss
scoring_elements 0.23389
published_at 2026-04-08T12:55:00Z
5
value 0.00079
scoring_system epss
scoring_elements 0.2344
published_at 2026-04-09T12:55:00Z
6
value 0.00079
scoring_system epss
scoring_elements 0.2346
published_at 2026-04-11T12:55:00Z
7
value 0.00079
scoring_system epss
scoring_elements 0.23421
published_at 2026-04-12T12:55:00Z
8
value 0.00079
scoring_system epss
scoring_elements 0.23367
published_at 2026-04-13T12:55:00Z
9
value 0.00079
scoring_system epss
scoring_elements 0.23385
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25680
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1892703
reference_id 1892703
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1892703
3
reference_url https://access.redhat.com/errata/RHSA-2020:4384
reference_id RHSA-2020:4384
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4384
Weaknesses
0
cwe_id 295
name Improper Certificate Validation
description The product does not validate, or incorrectly validates, a certificate.
Exploits
Severity_range_score3.1 - 3.1
Exploitability0.5
Weighted_severity2.8
Risk_score1.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-552m-7eh3-dbd8