Filter
Versions
Redhat Ansible Automation PlatformA flaw was found in ansible-tower where the default installation is vulnerable to job isolation esca…
8.8
First published (updated )
pip/ansibleInput Validation, Command Injection, Code Injection
7.1
First published (updated )
redhat/ansibleA flaw was found in several ansible modules, where parameters containing credentials, such as secret…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/ansible-towerA flaw was found in ansible tower. Default installations are vulnerable to “Job Isolation” Escapes t…
6.7
First published (updated )
redhat/ansibleA few different modules leak sensitive data such as secret values. This could lead in disclosing tho…
5.5
First published (updated )
redhat/ansiblesnmp_facts module in Ansible leaks user authentication such as authKey and privKey. This could lead …
5.5
First published (updated )
Redhat Ansible TowerThe dnf ansible module is not checking GPG signatures when installing packages. This allows installi…
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/ansible_towerAnsible Tower automatically associates an alias to a user's email in the API. This means that an att…
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Ansible TowerOAuth2 refresh tokens do not respect the expiration specified in REFRESH_TOKEN_EXPIRE_SECONDS.
7.1
First published (updated )
redhat/ansible_towerTower executes a memcached which is accessed via TCP on a domain socket that it is shared amongst co…
4.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/ansibleWhen a module uses a file that was encrypted with vault, it doesn not remove the decrypted file in /…
5.5
First published (updated )
Redhat Ansible TowerA flaw was found in Ansible Engine when the module package or service is used and the parameter 'use…
3.9
First published (updated )
Redhat Ansible TowerA flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode…
3.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.