VDB
CVE-2020-10779
CVE-2020-10779
PUBLISHED
Reported by redhat · Published August 11, 2020
Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypass due to missing privilege check. Therefore, if an attacker knows the right criteria, it is possible to access some sensitive data within the CloudForms.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | CloudForms | 4.7 and 5 |
| n/a | CloudForms | 4.7 |
Timeline
- Aug 11, 2020 CVE Published
- Aug 11, 2020 PoC Published
- Apr 14, 2021 EPSS Score
- Jun 24, 2021 EPSS Score
- Aug 26, 2021 EPSS Score
- Dec 31, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 5, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 7, 2022 EPSS Score
- Sep 12, 2022 EPSS Score