Description
Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with EVM-Operator group can perform actions restricted only to EVM-Super-administrator group, leads to, exporting or importing administrator files.
References (2)
Core 2
Core References
Issue Tracking, Vendor Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=1847811
Vendor Advisory x_refsource_misc
https://access.redhat.com/security/cve/cve-2020-10783
Scores
CVSS v3
8.3
EPSS
0.0035
EPSS Percentile
57.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Details
Status
published
Products (2)
redhat/cloudforms
4.7
redhat/cloudforms
5.0.0
Published
Aug 11, 2020
Tracked Since
Feb 18, 2026