CVE-2019-14841

2022-10-1700:00:00

CWE-281

redhat

www.cve.org

rhdm

unauthorized role change

admin privileges

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

37.0%

JSON

A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header. This flaw allows an attacker to gain admin privileges in the Business Central Console.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Business-central",
    "versions": [
      {
        "version": "Business-central as shipped in RHDM 7 and RHPAM 7",
        "status": "affected"
      }
    ]
  }
]