Red Hat Ansible Tower 3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:ansible_tower:3.0:*:*:*:*:*:*:*
part: a version: 3.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Ansible Tower (2228fc46-4d7f-5673-8891-d2b3ecc892a0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-4112 |
vulnerable | 2026-06-08 05:38:08.441866 |
Details available
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.
Published: 2022-08-25T19:35:45.000Z
Updated: 2024-08-03T17:16:04.236Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20228 |
vulnerable | 2026-06-08 05:29:08.771661 |
Details available
A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to confidentiality.
Published: 2021-04-29T15:34:08.000Z
Updated: 2024-08-03T17:30:07.863Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20191 |
vulnerable | 2026-06-08 05:29:08.676748 |
Details available
A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of this information to steal those credentials. The highest threat from this vulnerability is to data confidentiality. Versions before ansible 2.9.18 are affected.
Published: 2021-05-26T00:00:00.000Z
Updated: 2024-08-03T17:30:07.571Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20178 |
vulnerable | 2026-06-08 05:29:08.644748 |
Details available
A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials. The highest threat from this vulnerability is to confidentiality.
Published: 2021-05-26T00:00:00.000Z
Updated: 2024-08-03T17:30:07.440Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14365 |
vulnerable | 2026-06-08 05:19:23.133972 |
Details available
A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when disable_gpg_check is set to False, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code executed via package installation scripts. The highest threat from this vulnerability is to integrity and system availability.
Published: 2020-09-23T12:25:47.000Z
Updated: 2024-08-04T12:46:33.762Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10691 |
vulnerable | 2026-06-08 05:16:35.664417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14864 |
vulnerable | 2026-06-08 05:12:56.301787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.