Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2020-10778

In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is no server-side validation. This business logic flaw violate the expected behavior.

  • Published: Aug 11, 2020
  • Updated: Apr 13, 2023
  • CVE: CVE-2020-10778
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6
  • AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
redhat / cloudforms 4.7 4.7.x
redhat / cloudforms 5.0.0 5.0.0.x