CVE-2020-14296

Katalog CVE

CVSS 7.1 · High EPSS 0,64%

Kerentanan Server-Side Request Forgery (SSRF) pada redhat cloudforms management engine. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal network which are not normally accessible.

Rincian

Terbit di NVD

11 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,64% peluang dieksploitasi; lebih tinggi dari 49,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/cve-2020-14296 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1847860 issue tracking · advisory vendor