CVE-2019-18181

In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted…

published December 19, 2019

CVSS
—
EPSS
0%
Percentile
26.2
In the wild
Unconfirmed
What it is

In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only access to take actions that are otherwise restricted in the GUI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.2th percentile
Published
2019-12-19T18:17Z
EPSS history
Timeline
  • 19 DEC 18:17Z
    In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted…
    cvelistv5