Lucene search
PRIOn knowledge basePRION:CVE-2020-10778HistoryAug 11, 2020 - 1:15 p.m.
Input validation
2020-08-1113:15:00
PRIOn knowledge base
www.prio-n.com
3
In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is no server-side validation. This business logic flaw violate the expected behavior.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cloudforms | eq | 4.7 | |
| cloudforms | eq | 5.0.0 |
Related
cvelist
cvelist
CVE-2020-10778
2020-08-11 12:25:07
nvd
nvd
CVE-2020-10778
2020-08-11 13:15:12
redhatcve
redhatcve
CVE-2020-10778
2020-08-03 14:15:35
veracode
veracode
Authorization Bypass
2020-08-07 02:30:39
cve
cve
CVE-2020-10778
2020-08-11 13:15:12
redhat
redhat
nessus
nessus
RHEL 7 : CloudForms 4.7.16 (RHSA-2020:3574)
2020-08-27 00:00:00
RHEL 8 : CloudForms 5.0.7 update (Critical) (RHSA-2020:3358)
2020-08-06 00:00:00