CVE-2015-1482: Infoleak
Published Feb 4, 2015
·Updated
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and obtain sensitive information via a websocket connection to socket.io/1/.
Affected Software
1 affected component
Ansible Tower<=2.0.4
Event History
Feb 4, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1482?
CVE-2015-1482 is classified as a high severity vulnerability due to its potential to allow unauthorized access to sensitive information.
2
How do I fix CVE-2015-1482?
To fix CVE-2015-1482, upgrade Ansible Tower to version 2.0.5 or later.
3
What type of attack does CVE-2015-1482 involve?
CVE-2015-1482 involves a remote attack that can bypass authentication via a websocket connection.
4
Which versions of Ansible Tower are affected by CVE-2015-1482?
Versions of Ansible Tower prior to 2.0.5 are affected by CVE-2015-1482.
5
What can attackers gain access to through CVE-2015-1482?
Attackers can obtain sensitive information through the exploitation of CVE-2015-1482.