CVE-2020-14296

Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw

published August 11, 2020

CVSS
—
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal network which are not normally accessible.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00643 · 50.2th percentile
Published
2020-08-11T13:14Z
EPSS history
Timeline
  • 11 AUG 13:14Z
    Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw
    cvelistv5