Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting projects or inventory files.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HRed Hat Ansible Tower
APPRedhat< 3.3.3
Powiązane podatności
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and...
_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of serv...
The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact vi...
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This f...
A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occ...