Approved changes feed: RSS · Atom

cpe:2.3:a:red_hat,_inc.:ansible_tower:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRed Hat, Inc. (955c0640-1cfb-5fef-a58d-675724883b3d)
ProductAnsible Tower (87e1b2c7-7389-51a2-a5ef-6cfe4b090fcb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1104 vulnerable 2026-06-03 14:38:30.277333 Details available
Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server.
Published: 2018-05-02T19:00:00.000Z
Updated: 2024-09-16T19:09:02.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1101 vulnerable 2026-06-03 14:38:30.266216 Details available
Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrators access to the entire system.
Published: 2018-05-02T18:00:00.000Z
Updated: 2024-09-17T01:45:32.582Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.