AT
Product
Ansible Tower
64
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 22Medium 32Low 6
Watch
Add Ansible Tower to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10691 | 5.2 | Apr 30 | An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install Affected: 3.0 |
| CVE-2020-10744 | 5.0 | May 15 | An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive Affected: 3.4.0 through 3.4.5; 3.5.0 through 3.5.6; 3.6.0 through 3.6.4 |
| CVE-2020-1746 | 5.0 | May 12 | A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and… Affected: 3.4.0 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2020-1733 | 5.0 | Mar 11 | A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user Affected: through 3.3.4; 3.3.5 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2020-1740 | 4.7 | Mar 16 | A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files Affected: through 3.3.4; 3.3.5 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2018-0495 | 4.7 | Jun 13 | Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing… Affected: 3.3 |
| CVE-2020-1735 | 4.6 | Mar 16 | A flaw was found in the Ansible Engine when the fetch module is used Affected: through 3.3.4; 3.3.5 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2020-10697 | 4.4 | May 27 | A flaw was found in Ansible Tower when running Openshift Affected: before 3.4.6; 3.5.0 before 3.5.6; 3.6.0 before 3.6.4 |
| CVE-2020-1738 | 3.9 | Mar 16 | A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified Affected: through 3.3.4; 3.3.5 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2020-1739 | 3.9 | Mar 12 | A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command… Affected: through 3.3.4; 3.4.0 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3 |
| CVE-2020-14329 | 3.3 | May 27 | A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the /api/v2/labels/ endpoint Affected: before 3.7.2 |
| CVE-2020-14328 | 3.3 | May 27 | A flaw was found in Ansible Tower in versions before 3.7.2 Affected: before 3.7.2 |
| CVE-2020-10698 | 3.3 | May 27 | A flaw was found in Ansible Tower when running jobs Affected: before 3.4.6; 3.5.0 before 3.5.6; 3.6.0 before 3.6.4 |
| CVE-2020-1736 | 3.3 | Mar 16 | A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified Affected: through 3.3.4; 3.3.5 through 3.4.5; 3.5.0 through 3.5.5; 3.6.0 through 3.6.3; 3.7.0 through 3.7.2 |