Where
-Infinity
0

redhat Ansible Automation PlatformA flaw was found in ansible-tower where the default installation is vulnerable to job isolation esca…

Risk 72
Severity
8.8
First published (updated )

redhat Ansible TowerRace Condition

Risk 14
Severity
2.5
First published (updated )

redhat Ansible TowerInfoleak

Risk 31
Severity
5.5
First published (updated )

Red Hat Ansible TowerImportant: Red Hat Ansible Tower 3.7.5-1 - Container security and bug fix update

Risk 36
First published (updated )

redhat/ansible-towerA flaw was found in ansible tower. Default installations are vulnerable to “Job Isolation” Escapes t…

Risk 61
Severity
6.7
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pip/ansibleInfoleak

Risk 46
Severity
7.5
First published (updated )

redhat/ansibleA few different modules leak sensitive data such as secret values. This could lead in disclosing tho…

Risk 34
Severity
5.5
First published (updated )

redhat Ansible TowerThe dnf ansible module is not checking GPG signatures when installing packages. This allows installi…

Risk 55
Severity
7.1
First published (updated )

redhat/ansible_towerAnsible Tower automatically associates an alias to a user's email in the API. This means that an att…

Risk 30
Severity
5.8
First published (updated )

redhat/ansible_towerInfoleak

Risk 18
Severity
3.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/ansible_towerSSRF

Risk 18
Severity
3.3
First published (updated )

redhat/ansible_towerSSRF

Risk 32
Severity
5.5
First published (updated )

redhat/ansible-enginePath Traversal

Risk 34
Severity
5.2
First published (updated )

redhat/ansible-engineCode Injection, Race Condition

Risk 57
Severity
7.9
First published (updated )

redhat/ansibleWhen a module uses a file that was encrypted with vault, it doesn not remove the decrypted file in /…

Risk 34
Severity
5.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/ansible-engineInfoleak

Risk 30
Severity
5
First published (updated )

pip/ansibleAnsible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, i…

Risk 40
Severity
6.5
First published (updated )

redhat Ansible TowerA flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' a…

Risk 33
Severity
5.9
First published (updated )

redhat Ansible TowerA flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websock…

Risk 27
Severity
5.3
First published (updated )

redhat Ansible TowerA flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enablin…

Risk 54
Severity
8.2
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/ansible-engineCommand Injection, OS Command Injection, Input Validation

Risk 54
Severity
7.3
First published (updated )

redhat Ansible TowerA vulnerability was found in Ansible Tower before 3.6.1 where an attacker with low privilege could r…

Risk 59
Severity
8.4
First published (updated )

pip/ansibleWhen a module has an argument_spec with sub parameters marked as no_log, passing an invalid paramete…

Risk 68
Severity
7.3
First published (updated )

maven/org.jenkins-ci.plugins:ansible-towerCSRF

Risk 78
Severity
8.8
First published (updated )

maven/org.jenkins-ci.plugins:ansible-towerA missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallatio…

Risk 23
Severity
4.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.jenkins-ci.plugins:ansible-towerA missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallatio…

Risk 80
Severity
8.8
First published (updated )

redhat Ansible TowerInfoleak

Risk 66
Severity
7.2
First published (updated )

Fedoraproject FedoraIt was found that the superexec operator was available in the internal dictionary in ghostscript bef…

Risk 51
Severity
7.3
First published (updated )

Fedoraproject FedoraThe .forceput (or .forcedef depending on the ghostscript version) is still accessible via DefineReso…

Risk 51
Severity
7.3
First published (updated )

redhat Ansible TowerAnsible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure…

Risk 86
Severity
9.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203