CVE-2019-14841

State
Published
Severity
8.8 High
Published
Oct 17, 2022
Updated
May 13, 2025
Reserved
Aug 10, 2019

Read the record on cve.org

Description

A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header. This flaw allows an attacker to gain admin privileges in the Business Central Console.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
Business-centraln/a
  • Business-central as shipped in RHDM 7 and RHPAM 7Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.