Authentication flaw

A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to...

CVE-2020-10709

A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to...

CVE-2020-10709

CVE-2020-10709 concerns Ansible Tower where an OAuth2 token flow allows retrieval of a non-expiring refresh token. Affected versions are Ansible Tower before 3.6.4 and before 3.5.6. The flaw can let an attacker with token access fully authenticate to Ansible Tower, since the original user token r...

CVE-2020-10709

A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to...

CVE-2020-10698

A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the stdout of the executed jobs which are run from other organizations. Some sensible data can be disclosed. However, critical data should not be disclosed, as it should be protected by the nolog flag when...

CVE-2020-10698

Ansible Tower is affected. The vulnerability allows an attacker to read the stdout of jobs executed from other organizations, enabling partial data disclosure. Affected versions: before 3.6.4, before 3.5.6, and before 3.4.6. Root cause involves exposure of run-time job output via the websocket in...

CVE-2020-10697

A flaw was found in Ansible Tower when running Openshift. Tower runs a memcached, which is accessed via TCP. An attacker can take advantage of writing a playbook polluting this cache, causing a denial of service attack. This attack would not completely stop the service, but in the worst-case...

CVE-2020-10697

CVE-2020-10697 affects Red Hat Ansible Tower when run with OpenShift; Tower uses memcached over TCP and a crafted playbook can pollute the cache, leading to degraded Tower performance (DoS). Affected versions: Tower before 3.6.4, before 3.5.6, and before 3.4.6. Root cause: memcached interaction e...

PT-2021-9170 · Red Hat · Ansible Tower

Name of the Vulnerable Software and Affected Versions: Ansible Tower versions prior to 3.6.4 Ansible Tower versions prior to 3.5.6 Description: A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide...

PT-2021-9168 · Red Hat · Ansible Tower

Name of the Vulnerable Software and Affected Versions: Ansible Tower versions prior to 3.6.4 Ansible Tower versions prior to 3.5.6 Ansible Tower versions prior to 3.4.6 Description: A flaw was found in Ansible Tower when running Openshift, where Tower runs a memcached accessed via TCP. An attacke...

PT-2021-9169

Name of the Vulnerable Software and Affected Versions Ansible Tower versions prior to 3.6.4 Ansible Tower versions prior to 3.5.6 Ansible Tower versions prior to 3.4.6 Description A flaw in Ansible Tower allows an attacker to access the stdout of executed jobs from other organizations, potentiall...

PT-2021-9716

Name of the Vulnerable Software and Affected Versions Ansible Tower versions prior to 3.7.2 Description A data exposure flaw was found in Ansible Tower, where sensitive data can be exposed from the "/api/v2/labels/" endpoint. This flaw allows users from other organizations in the system to retrie...

PT-2021-9714

Name of the Vulnerable Software and Affected Versions Ansible Tower versions prior to 3.6.5 Ansible Tower versions prior to 3.7.2 Description A Server-side request forgery SSRF flaw was found in Ansible Tower. The flaw is exploited by supplying a URL that could lead to the server processing it,...

PT-2021-9715

Name of the Vulnerable Software and Affected Versions Ansible Tower versions prior to 3.7.2 Description A Server Side Request Forgery flaw can be abused by supplying a URL, which could lead to the server processing it and connecting to internal services or exposing additional internal services. I...

CVE-2020-14329: Exposure of Sensitive Information to an Unauthorized Actor

A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the /api/v2/labels/ endpoint. This flaw allows users from other organizations in the system to retrieve any label from the organization and also disclose organization names. The...

CVE-2020-14328: Server-Side Request Forgery (SSRF)

A flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw can be abused by supplying a URL which could lead to the server processing it connecting to internal services or exposing additional internal services and more particularly retrieving full details in ca...

CVE-2020-14327: Server-Side Request Forgery (SSRF)

A Server-side request forgery SSRF flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Functionality on the Tower server is abused by supplying a URL that could lead to the server processing it. This flaw leads to the connection to internal services or the exposure of...

CVE-2020-10709: Improper Authentication

A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to...

CVE-2020-10698: Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the stdout of the executed jobs which are run from other organizations. Some sensible data can be disclosed. However, critical data should not be disclosed, as it should be protected by the nolog flag when...

CVE-2020-10697: Missing Authorization

A flaw was found in Ansible Tower when running Openshift. Tower runs a memcached, which is accessed via TCP. An attacker can take advantage of writing a playbook polluting this cache, causing a denial of service attack. This attack would not completely stop the service, but in the worst-case...