AT
Product
Ansible Tower
64
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 22Medium 32Low 6
Watch
Add Ansible Tower to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20253 | 6.7 | Mar 9 | A flaw was found in ansible-tower Affected: before 3.6.7; 3.7.0 before 3.7.5; 3.8.0 before 3.8.2 |
| CVE-2020-10782 | 6.5 | Jun 18 | An exposure of sensitive information flaw was found in Ansible version 3.7.0 Affected: 3.7.0 |
| CVE-2019-14864 | 6.5 | Jan 2 | Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk… Affected: 3.0 |
| CVE-2017-7528 | 6.5 | Aug 22 | Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection Affected: All versions, or not specified |
| CVE-2018-14680 | 6.5 | Jul 28 | An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha Affected: 3.3 |
| CVE-2018-14679 | 6.5 | Jul 28 | An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha Affected: 3.3 |
| CVE-2018-13988 | 6.5 | Jul 25 | Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite Affected: 3.3.0 |
| CVE-2018-10768 | 6.5 | May 6 | There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5 Affected: 3.3 |
| CVE-2018-10767 | 6.5 | May 6 | There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 because it does not reject… Affected: 3.3 |
| CVE-2018-10733 | 6.5 | May 4 | There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0 Affected: 3.3 |
| CVE-2020-14337 | 5.8 | Jul 31 | A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes Affected: 3.0.0 |
| CVE-2019-14905 | 5.6 | Mar 31 | A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used… Affected: 3.0.0 |
| CVE-2020-14327 | 5.5 | May 27 | A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2 Affected: before 3.6.5; 3.7.0 before 3.7.2 |
| CVE-2021-20191 | 5.5 | May 26 | A flaw was found in ansible Affected: 3.0 |
| CVE-2021-20178 | 5.5 | May 26 | A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the… Affected: 3.0 |
| CVE-2021-3447 | 5.5 | Apr 1 | A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made… Affected: before 3.8.2 |
| CVE-2020-10685 | 5.5 | May 11 | A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and… Affected: through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2020-1753 | 5.5 | Mar 16 | A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7,… Affected: through 3.3.4; 3.4.0 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2019-19341 | 5.5 | Dec 19 | A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable Affected: 3.6.0 before 3.6.2 |
| CVE-2019-14858 | 5.5 | Oct 14 | A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5 Affected: 3.0 through 3.5.0 |
| CVE-2019-3838 | 5.5 | Mar 25 | It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27 Affected: 3.3 |
| CVE-2019-3835 | 5.5 | Mar 25 | It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27 Affected: 3.3 |
| CVE-2017-18267 | 5.5 | May 10 | The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file,… Affected: 3.3 |
| CVE-2019-19342 | 5.3 | Dec 19 | A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the '#' character Affected: 3.5.0 before 3.5.4; 3.6.0 before 3.6.2 |
| CVE-2020-10691 | 5.2 | Apr 30 | An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install Affected: 3.0 |
| CVE-2020-10744 | 5.0 | May 15 | An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive Affected: 3.4.0 through 3.4.5; 3.5.0 through 3.5.6; 3.6.0 through 3.6.4 |
| CVE-2020-1746 | 5.0 | May 12 | A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and… Affected: 3.4.0 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2020-1733 | 5.0 | Mar 11 | A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user Affected: through 3.3.4; 3.3.5 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2020-1740 | 4.7 | Mar 16 | A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files Affected: through 3.3.4; 3.3.5 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2018-0495 | 4.7 | Jun 13 | Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing… Affected: 3.3 |
| CVE-2020-1735 | 4.6 | Mar 16 | A flaw was found in the Ansible Engine when the fetch module is used Affected: through 3.3.4; 3.3.5 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2020-10697 | 4.4 | May 27 | A flaw was found in Ansible Tower when running Openshift Affected: before 3.4.6; 3.5.0 before 3.5.6; 3.6.0 before 3.6.4 |
Showing 32