What is CVE-2020-14325?

CVE-2020-14325 is a critical-severity vulnerability in Redhat Cloudforms. CVSS score: 9.1/10. Published 2020-08-11.

How severe is CVE-2020-14325?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Vulnerability in Redhat Cloudforms

CVE-2020-14325

Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with groups and roles. With a selected group…

EPSS: 0.011 (61.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Redhat Cloudforms
N/a Cloudforms — versions cfme 5.11.7.0

References

secalert@redhat.com (x_refsource_MISC, Mitigation, Issue Tracking, Vendor Advisory)
secalert@redhat.com (x_refsource_MISC, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2020-14325?: CVE-2020-14325 is a critical-severity vulnerability in Redhat Cloudforms. CVSS score: 9.1/10. Published 2020-08-11.
How severe is CVE-2020-14325?: Critical severity. CVSS v3 base score is 9.1 out of 10.