CVE-2020-10779

—

CVSS 3.1

6.5 medium

EPSS

<1%p54

Published

Aug 11, 2020 (Aug 11, 2020)

Modified

Jun 17, 2026

Description

Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypass due to missing privilege check. Therefore, if an attacker knows the right criteria, it is possible to access some sensitive data within the CloudForms.

Vendors: redhat
Products: cloudforms
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.