AT
Product
Ansible Tower
64
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 22Medium 32Low 6
Watch
Add Ansible Tower to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1738 | 3.9 | Mar 16 | A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified Affected: through 3.3.4; 3.3.5 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2020-1739 | 3.9 | Mar 12 | A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command… Affected: through 3.3.4; 3.4.0 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2020-14329 | 3.3 | May 27 | A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the /api/v2/labels/ endpoint Affected: before 3.7.2 |
| CVE-2020-14328 | 3.3 | May 27 | A flaw was found in Ansible Tower in versions before 3.7.2 Affected: before 3.7.2 |
| CVE-2020-10698 | 3.3 | May 27 | A flaw was found in Ansible Tower when running jobs Affected: before 3.4.6; 3.5.0 before 3.5.6; 3.6.0 before 3.6.4 |
| CVE-2020-1736 | 3.3 | Mar 16 | A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified Affected: through 3.3.4; 3.3.5 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3; 3.7.0 through 3.7.2 |
Showing 6