8.0
Élevée
CVE-2016-7070 A privilege escalation flaw was found in the Ansible Tower
Description
A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a PostgreSQL database, it incorrectly configures the trust level of postgres user. An attacker could use this vulnerability to gain admin level access to the database.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ansible Tower | 3.0.3 | Pas de correctif indiqué |
Autres CVE de Ansible Tower
Les 4 CVE de Ansible Tower →
CVE-2020-10782
An exposure of sensitive information flaw was found in Ansible version 3.7.0
6.5
Moyenne
CVE-2017-7528
Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection
5.2
Moyenne
CVE-2017-12148
A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories
8.4
Élevée