Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-25716

Опубликовано: 07 июн. 2021
Источник: nvd
CVSS3: 8.1
CVSS2: 5.5
EPSS Низкий

Описание

A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is possible. An attacker with a specific group can perform actions restricted only to system administrator. This is the affect of an incomplete fix for CVE-2020-10783. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before cfme 5.11.10.1 are affected

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:cloudforms:*:*:*:*:*:*:*:*
Версия до 5.11.10.1 (исключая)

EPSS

Процентиль: 37%
0.00157
Низкий

8.1 High

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-285
NVD-CWE-Other

Связанные уязвимости

CVSS3: 8.4
redhat
около 5 лет назад

A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is possible. An attacker with a specific group can perform actions restricted only to system administrator. This is the affect of an incomplete fix for CVE-2020-10783. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before cfme 5.11.10.1 are affected

EPSS

Процентиль: 37%
0.00157
Низкий

8.1 High

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-285
NVD-CWE-Other