Known vulnerabilities in Ansible Tower

Software: Ansible Tower
Software CPE: cpe:2.3:a:red_hat:ansible_tower:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ansible Tower Ansible Tower is affected by 19 known vulnerabilities: 1 high, 11 medium, 7 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60371 - Permissions, Privileges, and Access Controls
CVE-2021-4112
CWE-264 Medium
No
No
- 08.02.2022 SB2022020816
SB2022020817
SB2022020904
and 2 more
#VU52984 - Information Exposure Through Log Files
CVE-2021-3447
CWE-532 Low
No
No
3.8.2 10.05.2021 SB2021040180
SB2021051001
SB2021072616
and 13 more
#VU47245 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-25626
CWE-79 Low
No
No
3.7.3 30.09.2020 SB2020100114
SB2020100115
SB2022072402
and 2 more
#VU34120 - Exposure of sensitive information to an unauthorized actor
CVE-2020-14337
CWE-200 Medium
No
No
3.7.2 07.08.2020 SB2020080710
#VU34119 - Exposure of sensitive information to an unauthorized actor
CVE-2020-14329
CWE-200 Medium
No
No
3.7.2 07.08.2020 SB2020080710
#VU34118 - Server-Side Request Forgery (SSRF)
CVE-2020-14328
CWE-918 Medium
No
No
3.7.2 07.08.2020 SB2020080710
#VU34117 - Server-Side Request Forgery (SSRF)
CVE-2020-14327
CWE-918 Medium
No
No
3.7.2 07.08.2020 SB2020080710
#VU29567 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-10744
CWE-362 Low
No
No
- 07.07.2020 SB2020051522
SB2024050721
#VU29566 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1746
CWE-200 Low
No
No
3.5.6, 3.6.4 07.07.2020 SB2020051276
SB2020041765
SB2021080804
and 9 more
#VU29197 - Exposure of sensitive information to an unauthorized actor
CVE-2020-10782
CWE-200 Medium
No
No
3.7.1 22.06.2020 SB2020062215
#VU29022 -
CVE-2020-10685
Low
No
No
3.5.6, 3.6.4 15.06.2020 SB2020032420
SB2020061518
SB2021080804
and 10 more
#VU24222 - Incorrect Default Permissions
CVE-2019-19341
CWE-276 Low
No
No
3.6.2 13.01.2020 SB2019121926
#VU24221 - Resource Management Errors
CVE-2019-19342
CWE-399 Medium
No
No
3.5.4, 3.6.2 13.01.2020 SB2019121926
#VU24220 - Improper Access Control
CVE-2019-19340
CWE-284 Medium
No
No
3.5.3, 3.6.2 13.01.2020 SB2019121926
#VU22998 - Cleartext Storage of Sensitive Information
CVE-2019-14890
CWE-312 Medium
No
No
3.6.1 26.11.2019 SB2019112609
#VU31137 - Exposure of sensitive information to an unauthorized actor
CVE-2019-3869
CWE-200 Medium
No
No
3.4.3 28.03.2019 SB2019032831
#VU16715 - Permissions, Privileges, and Access Controls
CVE-2018-16879
CWE-264 Low
No
No
3.3.3 20.12.2018 SB2018122606
#VU31217 - Permissions, Privileges, and Access Controls
CVE-2016-7070
CWE-264 High
No
No
3.0.3 11.09.2018 SB2018091112
#VU31254 - Improper input validation
CVE-2017-12148
CWE-20 Medium
No
No
3.1.5 27.07.2018 SB2018072714