6.5
Medium
CVE-2020-10782 An exposure of sensitive information flaw was found in Ansible version 3.7.0
Description
An exposure of sensitive information flaw was found in Ansible version 3.7.0. Sensitive information, such tokens and other secrets could be readable and exposed from the rsyslog configuration file, which has set the wrong world-readable permissions. The highest threat from this vulnerability is to confidentiality. This is fixed in Ansible version 3.7.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ansible Tower | Versions not published |
Other CVEs of Ansible Tower
The 4 CVEs of Ansible Tower →
CVE-2016-7070
A privilege escalation flaw was found in the Ansible Tower
8.0
High
CVE-2017-7528
Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection
5.2
Medium
CVE-2017-12148
A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories
8.4
High