Description (CNA)
A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header. This flaw allows an attacker to gain admin privileges in the Business Central Console.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Business-central | affected Business-central as shipped in RHDM 7 and RHPAM 7 |
CWE
CWE-281
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1744801
- https://access.redhat.com/security/cve/CVE-2019-14841
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.