CVE-2020-14325 Auth bypass in CloudForms
Attackers can impersonate super administrators via API requests, gaining full control over the CloudForms environment.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-14325?
CVE-2020-14325 is a critical authentication bypass vulnerability in CloudForms, published on 11 Aug 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with groups and roles. With a selected group of EvmGroup-super_administrator, an attacker can perform any API request as a super administrator.
Which versions are affected by CVE-2020-14325?
It affects 1 product.
Products include Redhat Cloudforms.
How do I fix CVE-2020-14325?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-14325 being exploited?
There is no known exploitation of CVE-2020-14325 in the wild and no public exploit code.