371 matches found
CVE-2021-20253
CVE-2021-20253: Ansible Tower 中通过作业隔离逃逸实现权限提升 在 ansible-tower 中发现了一个缺陷。默认安装容易受到作业隔离逃逸的影响，允许攻击者从隔离环境外部将权限从低权限用户提升到 awx 用户。此漏洞的最大威胁在于数据机密性、完整性以及系统可用性。 供应商披露： 该漏洞的供应商披露和修复方法可在此处找到：此处。 要求： 此漏洞需要： 能够在 Ansible Tower 的隔离环境中执行命令 具有对操作系统的低权限访问 概念验证： 更多详细信息和利用过程可在此 PDF 中找到。...
MAL-015
MAL-015: Escape de Aislamiento 2 en Ansible Tower Las instalaciones de Ansible Tower en ciertas configuraciones de Rhel 7/8 son potencialmente vulnerables a los escapes de “Job Isolation” que permiten a un atacante escalar al usuario “awx” desde fuera del entorno aislado. Los siguientes...
CVE-2026-16544 Awx: websocket eventconsumer missing authorization for inventory_update_events, project_update_events, and system_job_events allows cross-organization stdout disclosure
A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are mapped in the consumeraccess function jobevents, workflowevents, adhoccommandevents. Three event groups - inventoryupdateevents, projectupdateevents, and systemjobevents — are n...
CVE-2026-12726
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...
CVE-2025-69223 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.11-sdk, py3.13-scanner-test-libraries-aiohttp, py3-cassandra-medusa, authentik, py3-vllm-cuda-12.4, kserve, kubeflow-pipelines-visualization-server, open-webui, awx, dask-kubernetes, airflow, checkov, request-1276...
EUVD-2015-1616
Malware in sbrugna...
EUVD-2020-0006
Malware in sbrugna...
EUVD-2020-3128
Malware in sbrugna...
EUVD-2018-8669
Malware in sbrugna...
EUVD-2017-16544
Malware in sbrugna...
EUVD-2019-8962
Malware in sbrugna...
EUVD-2018-11749
Malware in sbrugna...
EUVD-2019-8963
Malware in sbrugna...
EUVD-2019-8961
Malware in sbrugna...
EUVD-2015-1507
Malware in sbrugna...
EUVD-2020-0002
Malware in sbrugna...
EUVD-2020-0020
Malware in sbrugna...
EUVD-2018-11751
Malware in sbrugna...