{"metadata": {"vulnerability": "CVE-2020-1631", "count": 57, "kinds": {"milestone": 4, "sighting": 12, "kev": 11, "other": 30}}, "data": [{"timestamp": "2019-11-04T00:00:00Z", "date_only": false, "value": "2019-11-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-1631", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-04-27T00:00:00Z", "date_only": false, "value": "2020-04-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / juniper", "record": "CVE-2020-1631", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-04-27T16:00:00Z", "date_only": false, "value": "2020-04-27T16:00:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / juniper", "record": "CVE-2020-1631", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2020-04-27T16:00:00Z", "date_only": false, "value": "2020-04-27T16:00:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2020-1631", "record": "GSD-2020-1631", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2020-04-28T00:00:00Z", "date_only": false, "value": "2020-04-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202005-0617", "record": "VAR-202005-0617", "field": "sources_release_date.data.4.date"}, {"timestamp": "2020-04-28T00:00:00Z", "date_only": false, "value": "2020-04-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-247", "record": "CERTFR-2020-AVI-247", "field": "revisions.0.revision_date"}, {"timestamp": "2020-04-29T00:00:00Z", "date_only": true, "value": "2020-04-29", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-27195", "record": "CNVD-2020-27195", "field": "submitTime"}, {"timestamp": "2020-04-30T10:30:02Z", "date_only": false, "value": "2020-04-30T10:30:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/SecLabNews/7490", "record": "CVE-2020-1631", "field": "creation_timestamp", "uuid": "88f2837f-cdc2-4daa-8642-736b1cffdcca", "content": "\u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0439 \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430 Juniper Networks \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Junos OS, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 web-\u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 J-Web, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434 \u043e\u0434\u043d\u0438\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE (CVE-2020-1631). \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 httpd.log, \u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u00abworld\u00bb \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b \u0441\u0435\u0430\u043d\u0441\u043e\u0432 J-Web.    \nJuniper Networks \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Junos OS", "url": "https://t.me/SecLabNews/7490"}, {"timestamp": "2020-05-04T00:00:00Z", "date_only": false, "value": "2020-05-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202005-0617", "record": "VAR-202005-0617", "field": "sources_release_date.data.0.date"}, {"timestamp": "2020-05-04T09:25:12Z", "date_only": false, "value": "2020-05-04T09:25:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / juniper", "record": "CVE-2020-1631", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-05-04T09:25:12.322Z", "date_only": false, "value": "2020-05-04T09:25:12.322Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-1631", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-05-04T10:15:00Z", "date_only": false, "value": "2020-05-04T10:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G762-XHJQ-X42P", "record": "GHSA-G762-XHJQ-X42P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-05-04T10:15:00Z", "date_only": false, "value": "2020-05-04T10:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-1631", "record": "GSD-2020-1631", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-05-04T10:15:10.890Z", "date_only": false, "value": "2020-05-04T10:15:10.890000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202005-0617", "record": "VAR-202005-0617", "field": "sources_release_date.data.3.date"}, {"timestamp": "2020-05-04T10:15:10.890Z", "date_only": false, "value": "2020-05-04T10:15:10.890", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-1631", "record": "FKIE_CVE-2020-1631", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-05-09T00:00:00Z", "date_only": false, "value": "2020-05-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202005-0617", "record": "VAR-202005-0617", "field": "sources_update_date.data.4.date"}, {"timestamp": "2020-05-09T00:00:00Z", "date_only": true, "value": "2020-05-09", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-27195", "record": "CNVD-2020-27195", "field": "openTime"}, {"timestamp": "2020-06-05T00:00:00Z", "date_only": false, "value": "2020-06-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202005-0617", "record": "VAR-202005-0617", "field": "sources_update_date.data.2.date"}, {"timestamp": "2020-10-13T06:50:38Z", "date_only": false, "value": "2020-10-13T06:50:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4", "record": "CVE-2020-1631", "field": "creation_timestamp", "uuid": "c5485e13-e7d5-494e-91e9-7d6e4bcc3af1"}, {"timestamp": "2020-10-13T15:16:18Z", "date_only": false, "value": "2020-10-13T15:16:18.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f628d96f-2958-4717-91da-e86aace4925d", "record": "CVE-2020-1631", "field": "creation_timestamp", "uuid": "1a70138a-2f9f-486d-8ba5-67f1e212fc1d"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-1631", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b04bfddd-5c71-4fdb-9c45-b125c3e96403", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-1631", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "7747c685-6d88-4e29-80d7-786e3210fda6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-1631", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2020-1631", "record": "GSD-2020-1631", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-1631", "field": "evidence.0.details.added_date", "uuid": "7747c685-6d88-4e29-80d7-786e3210fda6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-1631", "field": "evidence.0.details.date_added", "uuid": "b04bfddd-5c71-4fdb-9c45-b125c3e96403", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-1631", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b04bfddd-5c71-4fdb-9c45-b125c3e96403", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-1631", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "7747c685-6d88-4e29-80d7-786e3210fda6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-1631", "field": "status.status_updated_at", "uuid": "b04bfddd-5c71-4fdb-9c45-b125c3e96403", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-1631", "field": "status.status_updated_at", "uuid": "7747c685-6d88-4e29-80d7-786e3210fda6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-1631", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": true, "value": "2022-04-15", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-1631", "field": "evidence.0.details.due_date", "uuid": "b04bfddd-5c71-4fdb-9c45-b125c3e96403", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": true, "value": "2022-04-15", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2020-1631", "record": "GSD-2020-1631", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T17:17:08Z", "date_only": false, "value": "2022-05-24T17:17:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G762-XHJQ-X42P", "record": "GHSA-G762-XHJQ-X42P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-11T00:00:00Z", "date_only": false, "value": "2023-01-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202005-0617", "record": "VAR-202005-0617", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-01-11T17:19:00Z", "date_only": false, "value": "2023-01-11T17:19Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-1631", "record": "GSD-2020-1631", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-01-11T17:19:03.343Z", "date_only": false, "value": "2023-01-11T17:19:03.343000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202005-0617", "record": "VAR-202005-0617", "field": "sources_update_date.data.3.date"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-1631", "field": "creation_timestamp", "uuid": "080f3405-b508-406d-a27e-8a715d7e12b5"}, {"timestamp": "2023-12-03T12:36:26Z", "date_only": false, "value": "2023-12-03T12:36:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/arpsyndicate/932", "record": "CVE-2020-1631", "field": "creation_timestamp", "uuid": "4b4747fc-5ec7-44f5-88b4-cb73597b401e", "content": "#ExploitObserverAlert\n\nCVE-2020-1631\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2020-1631. A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform local file inclusion (LFI) or path traversal. Using this vulnerability, an attacker may be able to inject commands into the httpd.log, read files with 'world' readable permission file or obtain J-Web session tokens. In the case of command injection, as the HTTP service runs as user 'nobody', the impact of this command injection is limited. (CVSS score 5.3, vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) In the case of reading files with 'world' readable permission, in Junos OS 19.3R1 and above, the unauthenticated attacker would be able to read the configuration file. (CVSS score 5.9, vector CVSS:3.1/ AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) If J-Web is enabled, the attacker could gain the same level of access of anyone actively logged into J-Web. If an administrator is logged in, the attacker could gain administrator access to J-Web. (CVSS score 8.8, vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) This issue only affects Juniper Networks Junos OS devices with HTTP/HTTPS services enabled. Junos OS devices with HTTP/HTTPS services disabled are not affected. If HTTP/HTTPS services are enabled, the following command will show the httpd processes: user@device> show system processes | match http 5260 - S 0:00.13 /usr/sbin/httpd-gk -N 5797 - I 0:00.10 /usr/sbin/httpd --config /jail/var/etc/httpd.conf To summarize: If HTTP/HTTPS services are disabled, there is no impact from this vulnerability. If HTTP/HTTPS services are enabled and J-Web is not in use, this vulnerability has a CVSS score of 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). If J-Web is enabled, this vulnerability has a CVSS score of 8.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Juniper SIRT has received a single report of this vulnerability being exploited in the wild. Out of an abundance of caution, we are notifying customers so they can take appropriate actions. Indicators of Compromise: The /var/log/httpd.log may have indicators that commands have injected or files being accessed. The device administrator can look for these indicators by searching for the string patterns \"=*;*", "url": "https://t.me/arpsyndicate/932", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:21:59.059Z", "date_only": false, "value": "2023-12-13T01:21:59.059642Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-1631", "record": "GSD-2020-1631", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T12:49:40.800Z", "date_only": false, "value": "2023-12-18T12:49:40.800000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202005-0617", "record": "VAR-202005-0617", "field": "last_update_date"}, {"timestamp": "2024-08-04T06:46:30.298Z", "date_only": false, "value": "2024-08-04T06:46:30.298Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-1631", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:29:23.466Z", "date_only": false, "value": "2024-12-24T20:29:23.466846Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971441", "record": "CVE-2020-1631", "field": "creation_timestamp", "uuid": "c94d54fa-76a8-4e99-a00a-2d6d3d6d0bac", "url": "https://feedsin.space/feed/CISAKevBot/items/2971441"}, {"timestamp": "2025-02-07T12:53:09.940Z", "date_only": false, "value": "2025-02-07T12:53:09.940482Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-1631", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-07T12:53:09.940Z", "date_only": false, "value": "2025-02-07T12:53:09.940482Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-1631", "record": "FKIE_CVE-2020-1631", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:10:26Z", "date_only": false, "value": "2025-02-23T02:10:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-1631", "field": "creation_timestamp", "uuid": "eb99c870-2ade-4e27-aa80-99447a649021"}, {"timestamp": "2025-10-21T23:35:44.571Z", "date_only": false, "value": "2025-10-21T23:35:44.571Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-1631", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:44.571Z", "date_only": false, "value": "2025-10-21T23:35:44.571Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-1631", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:54Z", "date_only": false, "value": "2025-10-22T00:31:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G762-XHJQ-X42P", "record": "GHSA-G762-XHJQ-X42P", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-1631", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "b04bfddd-5c71-4fdb-9c45-b125c3e96403", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:28:00.826Z", "date_only": false, "value": "2026-02-02T12:28:00.826131Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b04bfddd-5c71-4fdb-9c45-b125c3e96403", "record": "CVE-2020-1631", "field": "creation_timestamp", "uuid": "034999ed-b2f6-4773-a098-b2ef63f1916f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b04bfddd-5c71-4fdb-9c45-b125c3e96403", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-07T22:28:58Z", "date_only": false, "value": "2026-05-07T22:28:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4", "record": "CVE-2020-1631", "field": "creation_timestamp", "uuid": "ab61167b-4041-455f-9091-689f2aad6aa3"}, {"timestamp": "2026-06-17T03:02:02.143Z", "date_only": false, "value": "2026-06-17T03:02:02.143", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-1631", "record": "FKIE_CVE-2020-1631", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:26.465Z", "date_only": false, "value": "2026-06-19T12:47:26.465638Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85fab90d-104f-4f51-8920-f6b72cd58df1", "record": "CVE-2020-1631", "field": "creation_timestamp", "uuid": "3c890941-d1b2-4637-a980-859fe642be3b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85fab90d-104f-4f51-8920-f6b72cd58df1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-1631", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "7747c685-6d88-4e29-80d7-786e3210fda6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:12.489Z", "date_only": false, "value": "2026-06-23T14:05:12.489702Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7747c685-6d88-4e29-80d7-786e3210fda6", "record": "CVE-2020-1631", "field": "creation_timestamp", "uuid": "2c9bc62f-b986-4dee-b5c4-fdaaab73461b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7747c685-6d88-4e29-80d7-786e3210fda6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-11T00:15:02.666Z", "date_only": false, "value": "2026-07-11T00:15:02.666611Z", "kind": "sighting", "label": "Seen", "source": "MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4", "record": "CVE-2020-1631", "field": "creation_timestamp", "uuid": "38c4a9cc-f912-4a27-9651-e3e0ff34e13b"}], "metrics": {"as_of": "2026-10-29T09:17:13.510Z", "anchors": {"origin": {"timestamp": "2020-04-27T00:00:00Z", "date_only": false, "value": "2020-04-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / juniper", "record": "CVE-2020-1631", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2020-04-27T00:00:00Z", "date_only": false, "value": "2020-04-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / juniper", "record": "CVE-2020-1631", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-1631", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b04bfddd-5c71-4fdb-9c45-b125c3e96403", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 60220800.0, "hours": 16728.0, "days": 697.0, "min_seconds": 60134400.0, "max_seconds": 60307200.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2020-04-27T00:00:00Z", "date_only": false, "value": "2020-04-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / juniper", "record": "CVE-2020-1631", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-1631", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b04bfddd-5c71-4fdb-9c45-b125c3e96403", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 60220800.0, "hours": 16728.0, "days": 697.0, "min_seconds": 60134400.0, "max_seconds": 60307200.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2020-04-27T00:00:00Z", "date_only": false, "value": "2020-04-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / juniper", "record": "CVE-2020-1631", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-1631", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b04bfddd-5c71-4fdb-9c45-b125c3e96403", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 205319833.510322, "hours": 57033.28708620056, "days": 2376.386961925023, "min_seconds": 205233433.510322, "max_seconds": 205319833.510322, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-04-27T00:00:00Z", "date_only": false, "value": "2020-04-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / juniper", "record": "CVE-2020-1631", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T09:17:13.510Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 145099033.510322, "hours": 40305.28708620056, "days": 1679.3869619250231, "min_seconds": 145012633.510322, "max_seconds": 145099033.510322, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-1631", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b04bfddd-5c71-4fdb-9c45-b125c3e96403", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-29T09:17:13.510Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}