Ansible Tower
Approved changes feed: RSS · Atom
cpe:2.3:a:red_hat:ansible_tower:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Red Hat (a3686528-5679-55c9-b393-abe45df26bd2) |
|---|---|
| Product | Ansible Tower (20de6a53-7419-5088-ab45-39fc43d030d1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-10782 |
vulnerable | 2026-06-08 05:16:35.887389 |
Details available
MEDIUM (6.5)
An exposure of sensitive information flaw was found in Ansible version 3.7.0. Sensitive information, such tokens and other secrets could be readable and exposed from the rsyslog configuration file, which has set the wrong world-readable permissions. The highest threat from this vulnerability is to confidentiality. This is fixed in Ansible version 3.7.1.
Published: 2020-06-18T12:49:07.000Z
Updated: 2024-08-04T11:14:15.612Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7528 |
vulnerable | 2026-06-08 05:09:56.442965 |
Details available
MEDIUM (5.2)
Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For header allows internal servers to deploy other systems (using callback).
Published: 2018-08-22T16:00:00.000Z
Updated: 2024-08-05T16:04:11.874Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12148 |
vulnerable | 2026-06-08 05:08:45.359835 |
Details available
HIGH (8.4)
A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the 'delete before update' flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as.
Published: 2018-07-27T16:00:00.000Z
Updated: 2024-08-05T18:28:16.619Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7070 |
vulnerable | 2026-06-08 05:08:11.699648 |
Details available
HIGH (8)
A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a PostgreSQL database, it incorrectly configures the trust level of postgres user. An attacker could use this vulnerability to gain admin level access to the database.
Published: 2018-09-11T13:00:00.000Z
Updated: 2024-08-06T01:50:46.627Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.