Skip to content
Sign in
5.2 Medium

CVE-2017-7528 Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection

Description

Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For header allows internal servers to deploy other systems (using callback).

Affected products and versions

Product Affected versions Fixed in
Ansible Tower Versions not published

Other CVEs of Ansible Tower

The 4 CVEs of Ansible Tower →
CVE-2020-10782 An exposure of sensitive information flaw was found in Ansible version 3.7.0 6.5 Medium CVE-2016-7070 A privilege escalation flaw was found in the Ansible Tower 8.0 High CVE-2017-12148 A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories 8.4 High
Track this CVE