CVE-2020-14325

2020-08-1112:49:44

redhat

www.cve.org

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

JSON

Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with groups and roles. With a selected group of EvmGroup-super_administrator, an attacker can perform any API request as a super administrator.

CNA Affected

[
  {
    "product": "CloudForms",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "cfme 5.11.7.0"
      }
    ]
  }
]