CVE-2020-10709: High severity redhat Ansible Tower vulnerability
A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to Ansible Tower, which allows any user that can gain access to the token to be fully authenticated to Ansible Tower. This flaw affects Ansible Tower versions before 3.6.4 and Ansible Tower versions before 3.5.6.
Other sources
OAuth2 refresh tokens do not respect the expiration specified in REFRESHTOKENEXPIRESECONDS.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this security flaw in Ansible Tower?
The vulnerability ID is CVE-2020-10709.
What is the severity of CVE-2020-10709?
The severity of CVE-2020-10709 is high with a CVSS score of 7.1.
How does the vulnerability in Ansible Tower occur?
The vulnerability occurs when requesting an OAuth2 token with an OAuth2 application in Ansible Tower.
What is the impact of this vulnerability in Ansible Tower?
The vulnerability allows an attacker to obtain a refresh token that does not expire, giving unauthorized access to Ansible Tower.
How can I fix the security flaw in Ansible Tower?
To fix the security flaw, update Ansible Tower to version 3.6.4 or 3.5.6, depending on your current version.