In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only access to take actions that are otherwise restricted in the GUI.
Advisories
Source ID Title
EUVD EUVD EUVD-2019-7986 In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only access to take actions that are otherwise restricted in the GUI.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-05T01:47:13.705Z

Reserved: 2019-10-17T00:00:00

Link: CVE-2019-18181

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-12-19T19:15:14.090

Modified: 2024-11-21T04:32:46.870

Link: CVE-2019-18181

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.