EUVD-2020-6449

Malware in sbrugna...

CVE-2020-14296: Server-Side Request Forgery (SSRF)

Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery SSRF flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal network which are not normally accessible...

PT-2020-3571

Name of the Vulnerable Software and Affected Versions Red Hat CloudForms versions 4.7 through 5 Description The issue is related to a Server-Side Request Forgery SSRF flaw. It allows an attacker, with access to add an Ansible Tower provider, to scan and attack systems from the internal network th...