337 matches found
CVE-2021-20253
CVE-2021-20253: Escalada de Privilegios mediante Escape de Aislamiento de Trabajos en Ansible Tower Se encontró una falla en ansible-tower. La instalación predeterminada es vulnerable a un escape de aislamiento de trabajos que permite a un atacante elevar sus privilegios desde un usuario con poco...
MAL-015
MAL-015:Ansible Tower 中的隔离逃逸 2 在特定 Rhel 7/8 配置上的 Ansible Tower 安装可能容易受到“作业隔离”逃逸的影响,该逃逸允许攻击者从隔离环境外部提升到“awx”用户。 在 CVE-2021-20253 被修复后,攻击者可以利用以下文件/配置来执行作业隔离逃逸漏洞: 文件“/var/spool/mail/awx”: 如果目标上安装了 SMTP 服务器,攻击者可以创建该文件 也可能由“useradd”等程序创建(如果使用自定义的 awx 用户) 在 Rhel 7 或更低版本中,为了安装 AWX,需要安装运行时版本的...
CVE-2026-12726
A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...
CVE-2025-69223 vulnerabilities
Vulnerabilities for packages: airflow, checkov, request-1276, apache-beam-python-3.11-sdk, kserve, kubeflow-pipelines-visualization-server, authentik, py3.13-scanner-test-libraries-aiohttp, py3-cassandra-medusa, awx, open-webui, dask-kubernetes, py3-vllm-cuda-12.4...
EUVD-2020-3128
Malware in sbrugna...
EUVD-2019-8962
Malware in sbrugna...
EUVD-2015-1616
Malware in sbrugna...
EUVD-2020-0006
Malware in sbrugna...
EUVD-2017-16544
Malware in sbrugna...
EUVD-2018-8669
Malware in sbrugna...
EUVD-2019-8963
Malware in sbrugna...
EUVD-2018-11749
Malware in sbrugna...
EUVD-2020-0002
Malware in sbrugna...
EUVD-2019-8961
Malware in sbrugna...
EUVD-2015-1507
Malware in sbrugna...
EUVD-2020-0020
Malware in sbrugna...
EUVD-2018-11751
Malware in sbrugna...
EUVD-2017-3732
Malware in sbrugna...