CVEvulnerability
CVE-2020-14296
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-08-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-918
Description
Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal network which are not normally accessible.
Affected configurations
• redhat cloudforms management engine 4.7
• redhat cloudforms management engine 5.0
Related
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness
References
- https://access.redhat.com/security/cve/cve-2020-14296 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1847860 Issue Tracking, Vendor Advisory
- https://access.redhat.com/security/cve/cve-2020-14296 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1847860 Issue Tracking, Vendor Advisory