Total vulnerabilities in the database
Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For header allows internal servers to deploy other systems (using callback).
| Software | From | Fixed in |
|---|---|---|
| redhat / cloudforms_management_engine | 5.0 | 5.0.x |