Server-Side Request Forgery (SSRF)

2020-08-0702:30:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

28.6%

JSON

cfme is vulnerable to server-side request forgery (SSRF). The vulnerability exists in Ansible Tower Provider.

CPENameOperatorVersion
cfme-applianceeq5.11.6.0__1.el8cf
cfme-applianceeq5.11.0.28__1.el8cf
cfme-applianceeq5.11.2.2__1.el8cf
cfme-applianceeq5.11.1.2__1.el8cf
cfme-applianceeq5.11.4.2__1.el8cf
cfme-applianceeq5.11.3.1__1.el8cf
cfme-applianceeq5.11.5.2__1.el8cf
cfme-gemseteq5.11.6.0__1.el8cf
cfme-gemseteq5.11.0.28__1.el8cf
cfme-gemseteq5.11.2.2__1.el8cf

Name	Operator	Version
cfme-appliance	eq	5.11.6.0__1.el8cf
cfme-appliance	eq	5.11.0.28__1.el8cf
cfme-appliance	eq	5.11.2.2__1.el8cf
cfme-appliance	eq	5.11.1.2__1.el8cf
cfme-appliance	eq	5.11.4.2__1.el8cf
cfme-appliance	eq	5.11.3.1__1.el8cf
cfme-appliance	eq	5.11.5.2__1.el8cf
cfme-gemset	eq	5.11.6.0__1.el8cf
cfme-gemset	eq	5.11.0.28__1.el8cf
cfme-gemset	eq	5.11.2.2__1.el8cf