Red Hat Security AdvisoryRHSA-2021:0780
Red Hat Ansible Tower 3.8.2-1 - Container security and bug fix update
Released 2021-03-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Tower 3.8 for RHEL 7 ansible-tower-38/ansible-runner-rhel7, ansible-tower-38/ansible-tower-rhel7
Fixes 3 records
Priority LOW 34
In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with a…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.07605 · Published 2021-02-02 · Partial fix · 2.2.18, 3.1.6 +1 CWE-22
Priority LOW 30
A flaw was found in ansible-tower.
CVSS 3.1MEDIUM 6.7· Local · Low privileges · User interaction · EPSS 0.00411 · Published 2021-03-09 · Partial fix CWE-552
Priority LOW 30
Autobahn|Python before 20.12.3 allows redirect header injection.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01443 · Published 2020-12-27 · Partial fix · 20.12.3 CWE-601
