Authorization Bypass

2020-08-0702:30:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

28.6%

JSON

cfme-gemset is vulnerable to authorization bypass. The vulnerability exists through missing functional level access control & IDOR lead to compromise.

CPENameOperatorVersion
cfme-gemseteq5.11.0.28__1.el8cf
cfme-gemseteq5.11.6.0__1.el8cf
cfme-gemseteq5.11.2.2__1.el8cf
cfme-gemseteq5.11.1.2__1.el8cf
cfme-gemseteq5.11.4.2__1.el8cf
cfme-gemseteq5.11.3.1__1.el8cf
cfme-gemseteq5.11.5.2__1.el8cf
cfme-amazon-smartstateeq5.11.6.0__1.el8cf
cfme-amazon-smartstateeq5.11.0.28__1.el8cf
cfme-amazon-smartstateeq5.11.2.2__1.el8cf

Name	Operator	Version
cfme-gemset	eq	5.11.0.28__1.el8cf
cfme-gemset	eq	5.11.6.0__1.el8cf
cfme-gemset	eq	5.11.2.2__1.el8cf
cfme-gemset	eq	5.11.1.2__1.el8cf
cfme-gemset	eq	5.11.4.2__1.el8cf
cfme-gemset	eq	5.11.3.1__1.el8cf
cfme-gemset	eq	5.11.5.2__1.el8cf
cfme-amazon-smartstate	eq	5.11.6.0__1.el8cf
cfme-amazon-smartstate	eq	5.11.0.28__1.el8cf
cfme-amazon-smartstate	eq	5.11.2.2__1.el8cf