A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is possible. An attacker with a specific group can perform actions restricted only to system administrator. This is the affect of an incomplete fix for CVE-2020-10783. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before cfme 5.11.10.1 are affected
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2021-06-07T20:27:15
Updated: 2024-08-04T15:40:36.658Z
Reserved: 2020-09-16T00:00:00
Link: CVE-2020-25716
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-06-07T21:15:07.763
Modified: 2023-11-07T03:20:24.270
Link: CVE-2020-25716
Redhat