5.2
Moyenne
CVE-2017-7528 Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection
Description
Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For header allows internal servers to deploy other systems (using callback).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ansible Tower | Versions non publiées |
Autres CVE de Ansible Tower
Les 4 CVE de Ansible Tower →
CVE-2020-10782
An exposure of sensitive information flaw was found in Ansible version 3.7.0
6.5
Moyenne
CVE-2016-7070
A privilege escalation flaw was found in the Ansible Tower
8.0
Élevée
CVE-2017-12148
A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories
8.4
Élevée