Redhat Ansible Tower vulnerabilities

• red hat ansible-tower, redhat ansible automation platform, ansible automation platform early access +2 more +4 more A flaw was found in ansible-tower where the default installation is vulnerable to job isolation... CVE-2021-4112 Fix available 8.8 HighAugust 25, 2022
• red hat ansible, redhat ansible automation platform, ansible engine +1 more +3 more Improper Input Validation and Command Injection in Ansible CVE-2021-3583 Fix available 7.1 HighSeptember 22, 2021
• red hat tower, redhat ansible tower +1 more A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data... CVE-2020-14329 3.3 LowMay 27, 2021
• red hat tower, redhat ansible tower +1 more A flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw... CVE-2020-14328 3.3 LowMay 27, 2021
• red hat tower, redhat ansible tower +1 more A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and... CVE-2020-14327 5.5 MediumMay 27, 2021
• red hat tower, redhat ansible tower +1 more A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2... CVE-2020-10709 7.1 HighMay 27, 2021
• red hat tower, redhat ansible tower +1 more A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the... CVE-2020-10698 3.3 LowMay 27, 2021
• red hat tower, redhat ansible tower +1 more A flaw was found in Ansible Tower when running Openshift. Tower runs a memcached, which is... CVE-2020-10697 4.4 MediumMay 27, 2021
• red hat ansible, redhat ansible tower, fedoraproject fedora +2 more A flaw was found in several ansible modules, where parameters containing credentials, such as... CVE-2021-3447 Fix available 5.5 MediumApril 1, 2021
• red hat ansible, redhat ansible engine, debian linux +2 more +4 more Ansible Exposes Sensitive Information CVE-2021-20228 Fix available 7.5 HighMarch 12, 2021
• red hat ansible, oracle virtualization, redhat ansible tower +5 more +7 more Insertion of Sensitive Information into Log File in ansible CVE-2021-20191 Fix available 5.5 MediumMarch 12, 2021
• red hat ansible, fedoraproject fedora, redhat ansible tower +2 more Insertion of Sensitive Information into Log File in ansible CVE-2021-20178 Fix available 5.5 MediumMarch 12, 2021
• red hat ansible-tower, redhat ansible tower +1 more A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape... CVE-2021-20253 Public exploit 6.7 MediumMarch 9, 2021
• red hat ansible, redhat ansible engine, debian linux +3 more +5 more Improper Verification of Cryptographic Signature in ansible CVE-2020-14365 Fix available 7.1 HighSeptember 5, 2020
• red hat ansible tower A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return... CVE-2020-14337 5.8 MediumJuly 31, 2020
• red hat ansible tower An exposure of sensitive information flaw was found in Ansible Tower before version 3.7.1.... CVE-2020-10782 6.5 MediumJune 18, 2020
• red hat ansible, redhat ansible tower +1 more Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible CVE-2020-10744 Fix available 5.0 MediumMay 15, 2020
• red hat ansible, redhat ansible engine, ansible tower +1 more +3 more Exposure of Sensitive Information to an Unauthorized Actor in ansible CVE-2020-1746 Fix available 5.0 MediumMay 12, 2020
• red hat ansible, redhat ansible engine, ansible tower +4 more +6 more Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible CVE-2020-10685 Fix available 5.0 MediumMay 11, 2020
• red hat ansible, redhat ansible engine, ansible tower +2 more Path Traversal in Ansible CVE-2020-10691 Fix available 5.2 MediumApril 30, 2020
• red hat ansible, debian linux, fedoraproject fedora +2 more +4 more Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible CVE-2020-10684 Fix available 7.9 HighMarch 24, 2020
• red hat ansible, redhat ansible tower, cloudforms management engine +1 more +3 more Argument Injection in Ansible CVE-2020-1738 Fix available 3.9 LowMarch 16, 2020
• red hat ansible, debian linux, fedoraproject fedora +3 more +5 more Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible CVE-2020-1740 Fix available 3.9 LowMarch 16, 2020
• red hat ansible, debian linux, fedoraproject fedora +3 more +5 more Path Traversal in Ansible CVE-2020-1735 Fix available 4.2 MediumMarch 16, 2020
• red hat ansible, fedoraproject fedora, redhat ansible tower +2 more +4 more Incorrect Permission Assignment for Critical Resource in Ansible CVE-2020-1736 Fix available 2.2 LowMarch 16, 2020
• red hat ansible, redhat ansible engine, debian linux +2 more +4 more Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible CVE-2020-1753 Fix available 5.0 MediumMarch 16, 2020
• red hat ansible, debian linux, fedoraproject fedora +3 more +5 more Exposure of Sensitive Information to an Unauthorized Actor in Ansible CVE-2020-1739 Fix available 3.9 LowMarch 12, 2020
• red hat ansible, debian linux, fedoraproject fedora +3 more +5 more Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File CVE-2020-1733 Fix available 5.0 MediumMarch 11, 2020
• red hat ansible, redhat ansible engine, ansible tower +2 more Path Traversal in Ansible CVE-2020-1737 Fix available 7.5 HighMarch 9, 2020
• red hat ansible, redhat ansible engine, ansible tower +2 more OS Command Injection in ansible CVE-2020-1734 Fix available 7.4 HighMarch 3, 2020
• red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 more Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible CVE-2019-14905 Fix available 7.3 HighJanuary 28, 2020
• red hat tower, redhat ansible tower +1 more A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower... CVE-2019-19341 5.9 MediumDecember 19, 2019
• red hat tower, redhat ansible tower +1 more A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when ... CVE-2019-19342 5.3 MediumDecember 19, 2019
• red hat tower, redhat ansible tower, enterprise linux +2 more A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where... CVE-2019-19340 8.2 HighDecember 19, 2019
• red hat ansible, debian linux, opensuse backports sle +5 more +7 more Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible CVE-2019-14864 Fix available 5.7 MediumDecember 6, 2019
• [unknown] tower, redhat ansible tower +1 more An attacker with low privilege could retrieve usernames and passwords credentials from the new... CVE-2019-14890 8.4 HighNovember 26, 2019
• red hat ansible, redhat ansible engine, ansible tower +2 more Ansible leaks sensitive information to logs when told not to CVE-2019-14858 Fix available 7.3 HighOctober 14, 2019
• red hat tower, redhat ansible tower +1 more When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed... CVE-2019-3869 7.2 HighMarch 28, 2019
• artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 more It was found that the forceput operator could be extracted from the DefineResource method in... CVE-2019-3838 Fix available 7.3 HighMarch 21, 2019
• artifex ghostscript, debian linux, fedoraproject fedora +8 more +10 more It was found that the superexec operator was available in the internal dictionary in ghostscript... CVE-2019-3835 Fix available 7.3 HighMarch 21, 2019
• [unknown] tower, redhat ansible tower +1 more Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default... CVE-2018-16879 7.3 HighJanuary 3, 2019
• [unknown] ansible, debian linux, redhat ansible engine +2 more +4 more Ansible Leaks Data Passed to ssh-keygen CVE-2018-16837 Fix available 7.8 HighOctober 23, 2018
• paramiko, canonical ubuntu linux, debian linux +8 more +10 more Paramiko Authentication Bypass vulnerability CVE-2018-1000805 Fix available 8.8 HighOctober 8, 2018
• git-scm git, canonical ubuntu linux, debian linux +8 more +10 more Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x... CVE-2018-17456 Public exploitFix available EPSS 97.4% 9.8 CriticalOctober 5, 2018
• red hat ansible tower A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a... CVE-2016-7070 8.0 HighSeptember 11, 2018
• red hat ansible tower, redhat cloudforms management engine +1 more Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF... CVE-2017-7528 5.2 MediumAugust 22, 2018
• redhat ansible tower, red hat ansible-tower +1 more Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF)... CVE-2018-10884 8.8 HighAugust 22, 2018
• x libxcursor, canonical ubuntu linux, debian linux +4 more +6 more _XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause... CVE-2015-9262 Fix available 9.8 CriticalAugust 1, 2018
• cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 more An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one... CVE-2018-14682 Fix available 8.8 HighJuly 28, 2018
• cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 more An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad... CVE-2018-14681 Fix available 8.8 HighJuly 28, 2018
• Show olderLoading…