CVE-2018-1104

Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server...

CVE-2018-1104

Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server...

CVE-2018-1104

CVE-2018-1104 affects Ansible Tower up to version 3.2.3, where users who can define variables in a job template can achieve remote code execution on the Tower server. Public sources document this as a corrected issue in Red Hat CloudForms advisories RHSA-2018-1328 and RHSA-2018-1972, indicating p...

CVE-2018-1101

Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrato...

Privilege escalation

Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrato...

CVE-2018-1101

Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrato...

CVE-2018-1101

CVE-2018-1101 affects Ansible Tower before 3.2.4, where rights of system administrators within organizations can be escalated by organization admins, enabling password resets and full system access. Connected advisories (RHSA-2018:1972 and RHSA-2018:1328) indicate CloudForms/Ansible Tower fixes w...

CVE-2018-1101

Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrato...

CVE-2018-1104

Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server...

CVE-2018-1101

Ansible Tower, before version 3.2.4, has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization...

CVE-2018-1101: Incorrect Privilege Assignment

Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrato...

PT-2018-10260

Name of the Vulnerable Software and Affected Versions Ansible Tower versions prior to 3.2.4 Description The issue allows users with access to define variables for a job template to execute arbitrary code on the Tower server. Recommendations For versions prior to 3.2.4, update to version 3.2.4 or...

PT-2018-10238

Name of the Vulnerable Software and Affected Versions Ansible Tower versions prior to 3.2.4 Description The issue is related to a flaw in the management of system and organization administrators, allowing for privilege escalation. Specifically, system administrators who are members of organizatio...

CVE-2018-1104: Improper Input Validation

Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server...

tower-finance.com XSS vulnerability

Open Bug Bounty ID: OBB-590662 Description| Value ---|--- Affected Website:| tower-finance.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Important: Red Hat Security Advisory: Red Hat CloudForms security, bug fix, and enhancement update

An update is now available for CloudForms Management Engine 5.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

onepiecetower.tokyo XSS vulnerability

Open Bug Bounty ID: OBB-570582 Description| Value ---|--- Affected Website:| onepiecetower.tokyo Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3583-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3583-1 advisory. It was discovered that an out-of-bounds write vulnerability existed in the Flash-Friendly File System f2fs in the Linux kernel. An attacker could constru...

USN-3583-1: Linux kernel vulnerabilities

It was discovered that an out-of-bounds write vulnerability existed in the Flash-Friendly File System f2fs in the Linux kernel. An attacker could construct a malicious file system that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code. CVE-2017-0750 It...

UBUNTU-CVE-2017-15102

The towerprobe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users who are physically proximate for inserting a crafted USB device to gain privileges by leveraging a write-what-where condition that occurs after a race condition and a NULL pointer...