Red Hat Security Advisory: Red Hat Ansible Tower 3.7.5-1 - Container security and bug fix update
Red Hat Ansible Tower 3.7.5-1 - RHEL7 Container Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-20253US | medium6.7 | Exploit | ||
A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the aw… | ||||
| CVE-2020-35678US | medium6.1 | — | ||
Autobahn|Python before 20.12.3 allows redirect header injection. | ||||
| CVE-2019-20372US | medium5.3 | Exploit | ||
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environm… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2021:0779self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 1790277external
- 1911314external
- 1928847external
- Canonical URLself
remediations (6)
- Fixedansible-tower-37/ansible-tower-rhel7@sha256:728bcbeb14e0ea15a78fc5620075357758c79072e0378ec7d249d01aa966ed24_amd64 as a component of Red Hat Ansible Tower 3.7 for RHEL 7
For information on upgrading Ansible Tower, reference the Ansible Tower Upgrade and Migration Guide: https://docs.ansible.com/ansible-tower/latest/html/upgrade-migration-guide/index.html
https://access.redhat.com/errata/RHSA-2021:0779 - Fixedansible-tower-37/ansible-tower-rhel7@sha256:728bcbeb14e0ea15a78fc5620075357758c79072e0378ec7d249d01aa966ed24_amd64 as a component of Red Hat Ansible Tower 3.7 for RHEL 7
For information on upgrading Ansible Tower, reference the Ansible Tower Upgrade and Migration Guide: https://docs.ansible.com/ansible-tower/latest/html/upgrade-migration-guide/index.html
https://access.redhat.com/errata/RHSA-2021:0779 - Fixedansible-tower-37/ansible-tower-rhel7@sha256:728bcbeb14e0ea15a78fc5620075357758c79072e0378ec7d249d01aa966ed24_amd64 as a component of Red Hat Ansible Tower 3.7 for RHEL 7
For information on upgrading Ansible Tower, reference the Ansible Tower Upgrade and Migration Guide: https://docs.ansible.com/ansible-tower/latest/html/upgrade-migration-guide/index.html
https://access.redhat.com/errata/RHSA-2021:0779 - Workaroundansible-tower-37/ansible-tower-rhel7@sha256:728bcbeb14e0ea15a78fc5620075357758c79072e0378ec7d249d01aa966ed24_amd64 as a component of Red Hat Ansible Tower 3.7 for RHEL 7
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundansible-tower-37/ansible-tower-rhel7@sha256:728bcbeb14e0ea15a78fc5620075357758c79072e0378ec7d249d01aa966ed24_amd64 as a component of Red Hat Ansible Tower 3.7 for RHEL 7
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.
- Workaroundansible-tower-37/ansible-tower-rhel7@sha256:728bcbeb14e0ea15a78fc5620075357758c79072e0378ec7d249d01aa966ed24_amd64 as a component of Red Hat Ansible Tower 3.7 for RHEL 7
To mitigate this issue, use a named location instead of having the error_page handler do the redirect, this configuration is not vulnerable to request smuggling on all versions of NGINX we tested. server { listen 80; server_name localhost; error_page 401 @401; location / { return 401; } location @401 { return 302 http://example.org; } }
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan