CVE Vulnerabilities

CVE-2020-15949

Improper Authentication

Published: Nov 05, 2020 | Modified: Jul 21, 2021
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Immuta v2.8.2 is affected by one instance of insecure permissions that can lead to user account takeover.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Immuta Immuta 2.8.2 (including) 2.8.2 (including)

Potential Mitigations

References