Description
A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is possible. An attacker with a specific group can perform actions restricted only to system administrator. This is the affect of an incomplete fix for CVE-2020-10783. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before cfme 5.11.10.1 are affected
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Cloudforms | before cfme 5.11.10.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat CloudForms 5 | cfme +5 | 5.11.10.1-1.el8cf | RHSA-2020:5554 |
| Red Hat CloudForms 5 | v2v-conversion-host +1 | 1.16.2-6.el8ev | RHSA-2020:5554 |
Advisories 1
- RHSA-2020:5554 Red Hat Security Advisory: CloudForms 5.0.10 security, bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 27, 2026