CVE-2020-14325: Red Hat Cloudforms

Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with groups and roles. With a selected group of EvmGroup-super_administrator, an attacker can perform any API request as a super administrator.

Affected products

• Red Hat Cloudforms: before 5.11.7.0 (fixed in 5.11.7.0)

Published 2020-08-11. Last modified 2026-06-17.