CVE-2020-14327

A Server-side request forgery SSRF flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Functionality on the Tower server is abused by supplying a URL that could lead to the server processing it. This flaw leads to the connection to internal services or the exposure of...

CVE-2020-14327

The connected Red Hat advisories confirm CVE-2020-14327 affects Red Hat Ansible Tower, with the SSRF flaw exploitable via the Tower server when processing a URL through credentials lookup. Affected versions are Tower < 3.6.5 and

CVE-2020-14327

A Server-side request forgery SSRF flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Functionality on the Tower server is abused by supplying a URL that could lead to the server processing it. This flaw leads to the connection to internal services or the exposure of...

Moderate: Red Hat Security Advisory: Red Hat Ansible Tower 3.6.5-1 - RHEL7 Container

Red Hat Ansible Tower 3.6.5-1 - RHEL7 Container Removed reports option for Satellite inventory script Fixed Tower Server Side Request Forgery on Credentials CVE-2020-14327 Fixed the Job Type field to render properly when editing a Job Template Fixed a notable delay running large project update...

Moderate: Red Hat Security Advisory: Red Hat Ansible Tower 3.7.2-1 - RHEL7 Container

Red Hat Ansible Tower 3.7.2-1 - RHEL7 Container Updated Named URLs to allow for testing the presence or absence of objects CVE-2020-14337 Fixed Tower Server Side Request Forgery on Credentials CVE-2020-14327 Fixed Tower Server Side Request Forgery on Webhooks CVE-2020-14328 Fixed Tower sensitive...