CVE-2020-14380CWE-287

An account takeover flaw was found in Red Hat Satellite 6.7.2 onward

published June 2, 2021

CVSS
—
EPSS
1%
Percentile
55.8
In the wild
Unconfirmed
What it is

An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authentication source (SSO or Open ID) can claim the privileges of already existing local users of Satellite.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00789 · 55.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-06-02T12:27Z
EPSS history
Timeline
  • 02 JUN 12:27Z
    An account takeover flaw was found in Red Hat Satellite 6.7.2 onward
    cvelistv5