Red Hat Security Advisory: Red Hat Ansible Tower 3.7.2-1 - RHEL7 Container
Red Hat Ansible Tower 3.7.2-1 - RHEL7 Container
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-14329US | low3.3 | — | ||
A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the /api/v2/labels/ endpoint. This flaw allows users from other o… | ||||
| CVE-2020-14328US | low3.3 | — | ||
A flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw can be abused by supplying a URL which could lead to the server processing it connect… | ||||
| CVE-2020-14327US | medium5.5 | — | ||
A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Functionality on the Tower server is abused by supplying a URL that… | ||||
| CVE-2020-14337US | medium5.8 | — | ||
A data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return error codes. This flaw allows an unauthenticated, remote attacker to retrieve pages… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2020:3328self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1856785external
- 1856786external
- 1856787external
- 1859139external
- Canonical URLself
Behebungen (5)
- Behobenansible-tower-37/ansible-tower-rhel7@sha256:a9e9645cc0aa6d71d2448a1fc184452798560ba4435f819cc685505f8671ae76_amd64 as a component of Red Hat Ansible Tower 3.7 for RHEL 7
For information on upgrading Ansible Tower, reference the Ansible Tower Upgrade and Migration Guide: https://docs.ansible.com/ansible-tower/latest/html/upgrade-migration-guide/index.html
https://access.redhat.com/errata/RHSA-2020:3328 - Behobenansible-tower-37/ansible-tower-rhel7@sha256:a9e9645cc0aa6d71d2448a1fc184452798560ba4435f819cc685505f8671ae76_amd64 as a component of Red Hat Ansible Tower 3.7 for RHEL 7
For information on upgrading Ansible Tower, reference the Ansible Tower Upgrade and Migration Guide: https://docs.ansible.com/ansible-tower/latest/html/upgrade-migration-guide/index.html
https://access.redhat.com/errata/RHSA-2020:3328 - Behobenansible-tower-37/ansible-tower-rhel7@sha256:a9e9645cc0aa6d71d2448a1fc184452798560ba4435f819cc685505f8671ae76_amd64 as a component of Red Hat Ansible Tower 3.7 for RHEL 7
For information on upgrading Ansible Tower, reference the Ansible Tower Upgrade and Migration Guide: https://docs.ansible.com/ansible-tower/latest/html/upgrade-migration-guide/index.html
https://access.redhat.com/errata/RHSA-2020:3328 - Behobenansible-tower-37/ansible-tower-rhel7@sha256:a9e9645cc0aa6d71d2448a1fc184452798560ba4435f819cc685505f8671ae76_amd64 as a component of Red Hat Ansible Tower 3.7 for RHEL 7
For information on upgrading Ansible Tower, reference the Ansible Tower Upgrade and Migration Guide: https://docs.ansible.com/ansible-tower/latest/html/upgrade-migration-guide/index.html
https://access.redhat.com/errata/RHSA-2020:3328 - Workaroundansible-tower-37/ansible-tower-rhel7@sha256:a9e9645cc0aa6d71d2448a1fc184452798560ba4435f819cc685505f8671ae76_amd64 as a component of Red Hat Ansible Tower 3.7 for RHEL 7
There is no mitigation for this issue.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan