CVE-2017-7528

Name of the Vulnerable Software and Affected Versions Red Hat CloudForms Management Engine 5

Description The issue allows for CRLF Injection. It was found that the X-Forwarded-For header enables internal servers to deploy other systems using callback.

Recommendations For Red Hat CloudForms Management Engine 5, consider restricting access to the X-Forwarded-For header to minimize the risk of exploitation.