Ansible AWX WebUI Detection

Binary data ansibleawxdetect.nbin...

CVE-2018-10884

Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery CSRF in awx/api/authentication.py. An attacker could exploit this by tricking already authenticated users into visiting a malicious site and hijacking the authtoken cookie...

PT-2018-10157

Name of the Vulnerable Software and Affected Versions Ansible Tower versions prior to 3.1.8 and 3.2.6 Description The issue allows for cross-site request forgery CSRF in the awx/api/authentication.py module. An attacker could exploit this by tricking already authenticated users into visiting a...

CVE-2018-10884: Cross-Site Request Forgery (CSRF)

Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery CSRF in awx/api/authentication.py. An attacker could exploit this by tricking already authenticated users into visiting a malicious site and hijacking the authtoken cookie...

WS-2018-0166

Ansible awx versions 1.0.5 and 1.0.6 is vulnerable to cross-site request forgery CSRF in awx/api/authentication.py. An attacker could exploit this by tricking already authenticated users into visiting a malicious site and hijacking the authtoken cookie...