Lucene search
PRIOn knowledge basePRION:CVE-2020-14296HistoryAug 11, 2020 - 2:15 p.m.
Server side request forgery (ssrf)
2020-08-1114:15:00
PRIOn knowledge base
www.prio-n.com
2
Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal network which are not normally accessible.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cloudforms_management_engine | eq | 5.0 | |
| cloudforms_management_engine | eq | 4.7 |
Related
redhatcve
redhatcve
CVE-2020-14296
2020-08-03 13:44:01
veracode
veracode
Server-Side Request Forgery (SSRF)
2020-08-07 02:30:44
cvelist
cvelist
CVE-2020-14296
2020-08-11 13:14:57
cve
cve
CVE-2020-14296
2020-08-11 14:15:11
nvd
nvd
CVE-2020-14296
2020-08-11 14:15:11
nessus
nessus
RHEL 8 : CloudForms 5.0.7 update (Critical) (RHSA-2020:3358)
2020-08-06 00:00:00
redhat
redhat
(RHSA-2020:3358) Critical: CloudForms 5.0.7 bug fix and enhancement update
2020-08-06 14:27:00