CVE-2020-14369

This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a web application in which the user is currently authenticated. An attacker can make a forgery HTTP request to the server by crafting custom flash file which can force the user to perform state changing requests like provisioning VMs, running ansible playbooks and so forth.

CVSS v3 6.3 MEDIUM
CVSS v2.0 6.8 MEDIUM

6.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1871921	Issue Tracking Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:cloudforms:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-12-02 15:15

Updated : 2023-12-10 13:41

NVD link : CVE-2020-14369

Mitre link : CVE-2020-14369

CVE.ORG link : CVE-2020-14369

JSON object : View

Products Affected

redhat

cloudforms

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2020-14369", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 2.8}]}, "published": "2020-12-02T15:15:12.313", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1871921", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}, {"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a web application in which the user is currently authenticated. An attacker can make a forgery HTTP request to the server by crafting custom flash file which can force the user to perform state changing requests like provisioning VMs, running ansible playbooks and so forth."}, {"lang": "es", "value": "Esta versi\u00f3n corrige una vulnerabilidad de tipo Cross Site Request Forgery que se encontr\u00f3 en Red Hat CloudForms que forza a los usuarios finales a ejecutar acciones no deseadas en una aplicaci\u00f3n web en la que el usuario est\u00e1 actualmente autenticado. Un atacante puede hacer una petici\u00f3n HTTP falsificada al servidor al dise\u00f1ar un archivo flash personalizado que puede obligar al usuario a llevar a cabo una petici\u00f3n de cambio de estado, como aprovisionar m\u00e1quinas virtuales, ejecutando libros de jugadas de ansible, etc"}], "lastModified": "2020-12-04T21:12:03.650", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:cloudforms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C457595C-35E3-474E-AA3A-5CC69F1964F0", "versionEndIncluding": "5.11"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}