What is CVE-2020-10728?

CVE-2020-10728 is a high-severity vulnerability in Automationbroker Apb, classified under Incorrect Privilege Assignment. CVSS score: 7.8/10. Published 2022-08-16.

How severe is CVE-2020-10728?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2020-10728 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Privilege escalation in Automationbroker Apb

CVE-2020-10728

A flaw was found in automationbroker/apb container in versions up to and including 2.0.4-1. This container grants all users sudoer permissions allowing an unauthorized user with access to the running container the ability to escalate their own privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

EPSS: 0.002 (11.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Automationbroker Apb
N/a Automationbroker/apb — versions up to and including 2.0.4-1

Weakness classification (CWE)

Public proof-of-concept exploits

Live-Hack-CVE/CVE-2020-10728

References

secalert@redhat.com (Third Party Advisory, x_refsource_MISC, Issue Tracking)

Frequently asked questions

What is CVE-2020-10728?: CVE-2020-10728 is a high-severity vulnerability in Automationbroker Apb, classified under Incorrect Privilege Assignment. CVSS score: 7.8/10. Published 2022-08-16.
How severe is CVE-2020-10728?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2020-10728 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.