Security Advisory
CVE-2020-14296
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal network which are not normally accessible.