Lucene search

K
cvelistRedhatCVELIST:CVE-2020-14380
HistoryJun 02, 2021 - 12:27 p.m.

CVE-2020-14380

2021-06-0212:27:11
CWE-287
redhat
www.cve.org
8
account takeover
red hat satellite
authentication source

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

35.6%

An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the privileges of already existing local users of Satellite.

CNA Affected

[
  {
    "product": "Red Hat Satellite",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Red Hat Satellite 6.8"
      }
    ]
  }
]

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

35.6%