ansible-tower-setup vulnerabilities (Red Hat)
30 vulnerabilities.
-
ansible-tower-setupRed Hat cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A... 6.5 Medium -
ansible-tower-setupRed Hat cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to... 4.3 Medium -
ansible-tower-setupRed Hat bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point.... 7.4 High -
ansible-tower-setupRed Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
ansible-tower-setupRed Hat When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed... 7.2 High -
ansible-tower-setupRed Hat Path Traversal in Action View 7.5 High -
ansible-tower-setupRed Hat Denial of Service Vulnerability in Action View 7.5 High -
ansible-tower-setupRed Hat A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with... 4.3 Medium -
ansible-tower-setupRed Hat A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a... 8.4 High -
ansible-tower-setupRed Hat The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud... 4.1 Medium -
ansible-tower-setupRed Hat A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the... 6.5 Medium -
ansible-tower-setupRed Hat It was found that CloudForms does not verify that the server hostname matches the domain name in... 6.5 Medium -
ansible-tower-setupRed Hat CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on... 6.5 Medium -
ansible-tower-setupRed Hat In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that... 8.8 High -
ansible-tower-setupRed Hat CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby... 7.8 High -
ansible-tower-setupRed Hat Ansible exposes sensitive data in log files and on the terminal 5.9 Medium -
ansible-tower-setupRed Hat Rubyzip gem contains a Directory Traversal vulnerability in zip file component 9.8 Critical -
ansible-tower-setupRed Hat Sprockets path traversal leads to information leak 7.5 High -
ansible-tower-setupRed Hat Sinatra Cross-site Scripting vulnerability 6.1 Medium -
ansible-tower-setupRed Hat Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to... 8.8 High -
ansible-tower-setupRed Hat Ansible Tower before version 3.2.4 has a flaw in the management of system and organization... 7.2 High -
ansible-tower-setupRed Hat rails-html-sanitizer Cross-site Scripting vulnerability 6.1 Medium -
ansible-tower-setupRed Hat Cross-site Scripting in loofah 6.1 Medium -
ansible-tower-setupRed Hat Paramiko not properly checking authentication before processing other requests 9.8 Critical -
ansible-tower-setupRed Hat A flaw was found in the CloudForms account configuration when using VMware. By default, a shared... 7.4 High -
ansible-tower-setupRed Hat The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA... 5.9 Medium -
ansible-tower-setupRed Hat Incorrect Default Permissions in Supervisor 8.8 High -
ansible-tower-setupRed Hat CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate. 7.5 High -
ansible-tower-setupRed Hat Nokogiri is vulnerable to XML External Entity (XXE) attack 7.5 High -
ansible-tower-setupRed Hat i18n gem Cross-site Scripting vulnerability 4.3 Medium