CVE-2020-10783: High severity redhat Cloudforms vulnerability
Published Jun 17, 2020
·Updated
Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with EVM-Operator group can perform actions restricted only to EVM-Super-administrator group, leads to, exporting or importing administrator files.
Affected Software
3 affected componentsFixes available
redhat/cfme-gemset<5.11.7.1
5.11.7.1
redhat Cloudforms=4.7
redhat Cloudforms=5.0.0
Event History
Aug 11, 2020
CVE Published
via MITRE·12:35 PM
Data Sourced
via MITRE·12:35 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-10783?
CVE-2020-10783 is a role-based privilege escalation flaw in Red Hat CloudForms 4.7 and 5.
2
What is the severity of CVE-2020-10783?
The severity of CVE-2020-10783 is high with a CVSS score of 8.3.
3
How does CVE-2020-10783 affect Red Hat CloudForms?
CVE-2020-10783 allows an attacker with the EVM-Operator group to perform actions restricted to the EVM-Super-administrator group, leading to the exporting or importing of administrator files.
4
Which versions of Red Hat CloudForms are affected by CVE-2020-10783?
Red Hat CloudForms 4.7 and 5.0.0 are affected by CVE-2020-10783.
5
How can I fix CVE-2020-10783?
To fix CVE-2020-10783, update Red Hat CloudForms to version 5.11.7.1 or later.