CVE-2020-14380

7.5 highEPSS 0.8%

High (7.5) in redhat satellite. EPSS 0.8% chance of exploitation in the next 30 days.

An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the privileges of already existing local users of Satellite.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2021-06-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:satellite

References

https://bugzilla.redhat.com/show_bug.cgi?id=1873926
https://bugzilla.redhat.com/show_bug.cgi?id=1873926

Check your stack JSON