Red Hat Security AdvisoryRHSA-2018:1972
Red Hat CloudForms security, bug fix, and enhancement update
Released 2018-06-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- CloudForms Management Engine 5.8 ansible-2.4.4.0-1.el7ae, ansible-tower-server-3.1.7-1.el7at, ansible-tower-setup-3.1.7-1.el7at +7
Fixes 3 records
Priority MEDIUM 64
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly chec…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.27105 · Published 2018-03-13 · Partial fix · 2.0.8, 2.1.5 +5 CWE-287
Priority MEDIUM 43
Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0247 · Published 2018-05-02 · Fixed CWE-20
Priority LOW 35
Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation.
CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01942 · Published 2018-05-02 · Fixed in 3.2.4 CWE-266
