CVE-2020-14329

Ansible Tower (pre-3.7.2) contains a data exposure flaw where the /api/v2/labels/ endpoint can leak labels across organizations and disclose organization names. The vulnerability primarily affects confidentiality; CVSSv3 base score 3.3 (LOW) with LOCAL access and no user interaction. Red Hat advi...

Moderate: Red Hat Security Advisory: Red Hat Ansible Tower 3.7.2-1 - RHEL7 Container

Red Hat Ansible Tower 3.7.2-1 - RHEL7 Container Updated Named URLs to allow for testing the presence or absence of objects CVE-2020-14337 Fixed Tower Server Side Request Forgery on Credentials CVE-2020-14327 Fixed Tower Server Side Request Forgery on Webhooks CVE-2020-14328 Fixed Tower sensitive...