Red Hat Tower vulnerabilities

• red hat advanced cluster management for kubernetes 2, ansible automation platform 1.2, ansible tower 3 +4 more +6 more Openshift api admission checks does not enforce "custom-host" permissions CVE-2022-3248 4.4 MediumOctober 5, 2023
• red hat ansible-tower, redhat ansible automation platform, ansible automation platform early access +2 more +4 more A flaw was found in ansible-tower where the default installation is vulnerable to job isolation... CVE-2021-4112 Fix available 8.8 HighAugust 25, 2022
• red hat tower, redhat ansible tower +1 more A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data... CVE-2020-14329 3.3 LowMay 27, 2021
• red hat tower, redhat ansible tower +1 more A flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw... CVE-2020-14328 3.3 LowMay 27, 2021
• red hat tower, redhat ansible tower +1 more A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and... CVE-2020-14327 5.5 MediumMay 27, 2021
• red hat tower, redhat ansible tower +1 more A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2... CVE-2020-10709 7.1 HighMay 27, 2021
• red hat tower, redhat ansible tower +1 more A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the... CVE-2020-10698 3.3 LowMay 27, 2021
• red hat tower, redhat ansible tower +1 more A flaw was found in Ansible Tower when running Openshift. Tower runs a memcached, which is... CVE-2020-10697 4.4 MediumMay 27, 2021
• red hat ansible-tower, redhat ansible tower +1 more A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape... CVE-2021-20253 Public exploit 6.7 MediumMarch 9, 2021
• red hat ansible tower A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return... CVE-2020-14337 5.8 MediumJuly 31, 2020
• red hat ansible tower An exposure of sensitive information flaw was found in Ansible Tower before version 3.7.1.... CVE-2020-10782 6.5 MediumJune 18, 2020
• red hat tower, redhat ansible tower +1 more A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower... CVE-2019-19341 5.9 MediumDecember 19, 2019
• red hat tower, redhat ansible tower +1 more A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when ... CVE-2019-19342 5.3 MediumDecember 19, 2019
• red hat tower, redhat ansible tower, enterprise linux +2 more A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where... CVE-2019-19340 8.2 HighDecember 19, 2019
• [unknown] tower, redhat ansible tower +1 more An attacker with low privilege could retrieve usernames and passwords credentials from the new... CVE-2019-14890 8.4 HighNovember 26, 2019
• red hat tower, redhat ansible tower +1 more When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed... CVE-2019-3869 7.2 HighMarch 28, 2019
• [unknown] tower, redhat ansible tower +1 more Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default... CVE-2018-16879 7.3 HighJanuary 3, 2019
• red hat ansible tower A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a... CVE-2016-7070 8.0 HighSeptember 11, 2018
• red hat ansible tower, redhat cloudforms management engine +1 more Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF... CVE-2017-7528 5.2 MediumAugust 22, 2018
• redhat ansible tower, red hat ansible-tower +1 more Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF)... CVE-2018-10884 8.8 HighAugust 22, 2018
• red hat ansible tower, redhat cloudforms +1 more A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a... CVE-2017-12148 8.4 HighJuly 27, 2018
• red hat ansible tower, redhat cloudforms +1 more Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to... CVE-2018-1104 8.8 HighMay 2, 2018
• red hat ansible tower, redhat cloudforms +1 more Ansible Tower before version 3.2.4 has a flaw in the management of system and organization... CVE-2018-1101 7.2 HighMay 2, 2018