CVE-2020-10779

6.5 mediumEPSS 0.8%

Medium (6.5) in redhat cloudforms. EPSS 0.8% chance of exploitation in the next 30 days.

Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypass due to missing privilege check. Therefore, if an attacker knows the right criteria, it is possible to access some sensitive data within the CloudForms.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2020-08-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:cloudforms

References

https://access.redhat.com/security/cve/cve-2020-10779
https://bugzilla.redhat.com/show_bug.cgi?id=1847647
https://access.redhat.com/security/cve/cve-2020-10779
https://bugzilla.redhat.com/show_bug.cgi?id=1847647

Check your stack JSON