Filter
Redhat Ansible Automation PlatformA flaw was found in ansible-tower where the default installation is vulnerable to job isolation esca…
8.8
First published (updated )
Pulpproject PulpPulpcore: rbac permissions incorrectly assigned in tasks that create objects
8.3
EPSS
0.04%
First published (updated )
Redhat Ansible Automation PlatformPlatform: ec2_key module prints out the private key directly to the standard output
7.8
First published (updated )
Redhat Enterprise LinuxPython-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache Tomcat- Rapid Reset HTTP/2 vulnerability
First published (updated )
redhat/automation-controllerController: html injection in custom login info
7.3
First published (updated )
pip/ansibleInput Validation, Command Injection, Code Injection
7.1
First published (updated )
Redhat Ansible Automation PlatformA privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote …
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraAn Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinatio…
6.5
First published (updated )
Redhat Ansible Automation PlatformHub: insecure galaxy-importer tarfile extraction
6.5
First published (updated )
Redhat Ansible Automation PlatformAnsible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files
6.3
First published (updated )
Redhat Ansible Automation PlatformPlatform: token exposed at importing project
6.3
First published (updated )
Redhat Ansible Automation PlatformAap-gateway: xss on aap-gateway
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Ansible Automation PlatformController: cross site scripting in automation controller ui
6.1
First published (updated )
pip/ansible-coreAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration
5.5
First published (updated )
Redhat Ansible Automation PlatformA flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in th…
5.5
First published (updated )
Pulpproject Pulp AnsibleThe collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted …
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.