CVE-2017-7528

State: Published
Severity: 5.2 Medium
Published: Aug 22, 2018
Updated: Aug 5, 2024
Reserved: Apr 5, 2017

Description

Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For header allows internal servers to deploy other systems (using callback).

Scores

CVSS	Score	Vector	Source
3.0	5.2 Medium	CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N	redhat

Weaknesses

CWE-113

Affected Products

Product	Versions
Ansible TowerRed Hat	As shipped with Red Hat CloudForms Management Engine 5Affected

References

105143vdb-entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7528

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.