Medium severity5.2NVD Advisory· Published Aug 22, 2018· Updated Jun 17, 2026

CVE-2017-7528

Description

Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For header allows internal servers to deploy other systems (using callback).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Ansible Tower
cpe:2.3:a:redhat:ansible_tower:-:*:*:*:*:*:*:*
Red Hat/Cloudforms Management Engine
cpe:2.3:a:redhat:cloudforms_management_engine:5.0:*:*:*:*:*:*:*
Red Hat/Ansiblecpe-rescue
Range: As shipped with Red Hat CloudForms Management Engine 5

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105143nvdThird Party AdvisoryVDB Entry
bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.338
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000