Red Hat Security AdvisoryRHSA-2021:0779
Red Hat Ansible Tower 3.7.5-1 - Container security and bug fix update
Released 2021-03-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Tower 3.7 for RHEL 7 ansible-tower-37/ansible-tower-rhel7
Fixes 3 records
Priority MEDIUM 40
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a l…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.14961 · Published 2020-01-09 · Partial fix CWE-444
Priority LOW 30
A flaw was found in ansible-tower.
CVSS 3.1MEDIUM 6.7· Local · Low privileges · User interaction · EPSS 0.00411 · Published 2021-03-09 · Partial fix CWE-552
Priority LOW 30
Autobahn|Python before 20.12.3 allows redirect header injection.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01443 · Published 2020-12-27 · Partial fix · 20.12.3 CWE-601