EUVD-2018-2948

Malware in sbrugna...

PT-2018-10157

Name of the Vulnerable Software and Affected Versions Ansible Tower versions prior to 3.1.8 and 3.2.6 Description The issue allows for cross-site request forgery CSRF in the awx/api/authentication.py module. An attacker could exploit this by tricking already authenticated users into visiting a...

WS-2018-0166

Ansible awx versions 1.0.5 and 1.0.6 is vulnerable to cross-site request forgery CSRF in awx/api/authentication.py. An attacker could exploit this by tricking already authenticated users into visiting a malicious site and hijacking the authtoken cookie...