8.0
High
CVE-2016-7070 A privilege escalation flaw was found in the Ansible Tower
Description
A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a PostgreSQL database, it incorrectly configures the trust level of postgres user. An attacker could use this vulnerability to gain admin level access to the database.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ansible Tower | 3.0.3 | No fix stated |
Other CVEs of Ansible Tower
The 4 CVEs of Ansible Tower →
CVE-2020-10782
An exposure of sensitive information flaw was found in Ansible version 3.7.0
6.5
Medium
CVE-2017-7528
Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection
5.2
Medium
CVE-2017-12148
A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories
8.4
High