Security Advisory

CVE-2017-7528

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-08-22 16:00:00

Last updated 2024-08-05 16:04:11

Assigner redhat

CVSS score 5.2

State PUBLISHED

Description

Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For header allows internal servers to deploy other systems (using callback).

← Browse all CVEs View on cve.org ↗