VULNERABILITY INTELLIGENCE

CVE-2020-10779

CVSS score6.5 MEDIUM
EPSS probability0.78%
CISA KEVNot currently listed
Published2020-08-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypass due to missing privilege check. Therefore, if an attacker knows the right criteria, it is possible to access some sensitive data within the CloudForms.

Weakness classification

  • nvd@nist.gov: CWE-639

Primary references