Vulnerabilities

TI-2015-01343 CVE-2015-1482 · GHSA-qwm2-p4xm-jjjq

Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass…

LOW 34

Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and obtain sensitive information via a websocket connection to socket.io/1/.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08543 Published 2015-02-04 No fix listed CWE-200

TI-2015-01342 CVE-2015-1481 · GHSA-mv5f-9r7g-hr97

Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to…

LOW 38

Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a superuser account.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.06145 Published 2015-02-04 No fix listed CWE-264

TI-2015-01245 CVE-2015-1368 · GHSA-m5g3-vw48-vpcq

Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI)…

LOW 28

Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI) before 2.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) order_by parameter to credentials/, (2) invento…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05153 Published 2015-01-27 No fix listed CWE-79

Vulnerabilities

Filters

Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass…

Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to…

Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI)…