CVEvulnerability

CVE-2019-14841

8.8 HIGH Published 2022-10-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-10-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-281

Description

A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header. This flaw allows an attacker to gain admin privileges in the Business Central Console.

Affected configurations

• redhat decision manager 7.0 • redhat process automation 7.0

Related

Weakness · CWE (1)

  • CWE-281 Improper Preservation of Permissions weakness

References