CVE-2020-10778

Katalog CVE

CVSS 6.0 · Medium EPSS 0,88%

Kerentanan Incorrect Resource Transfer Between Spheres pada redhat cloudforms. Skor CVSS 3.1 6.0 (Medium) menurut NVD.

Deskripsi (NVD)

In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is no server-side validation. This business logic flaw violate the expected behavior.

Rincian

Terbit di NVD

11 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.0 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-669: Incorrect Resource Transfer Between Spheres

EPSS (30 hari)

0,88% peluang dieksploitasi; lebih tinggi dari 57,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/cve-2020-10778 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1847628 issue tracking · advisory vendor