{"id":"CVE-2020-1703","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-1703","generatedAt":"2026-10-27T23:43:05.987Z","title":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Red Hat Product Security does not consider this as a security flaw. Password changes aren't expected to invalidate existing sessions. Though this is how Kerberos behaves: incrementing kvno will not invalidate any existing service tickets. This is not a concern because the lifetime on service tickets should be set appropriately (initially only a global, now also more finely configurable with the kdcpolicy plugin). This belief is reinforced by our use of mod_session: existing sessions there aren't terminated, but instead wait for expiration","published":"2020-06-03T14:15:13.000Z","lastModified":"2023-11-07T03:19:28.000Z","status":"Rejected","sourceIdentifier":"secalert@redhat.com","cvss":null,"cwe":[],"affected":[],"epss":null,"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"unknown","text":"Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published."},"changes":[],"references":[],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-1703","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}