6.5
Moyenne
CVE-2020-10782 An exposure of sensitive information flaw was found in Ansible version 3.7.0
Description
An exposure of sensitive information flaw was found in Ansible version 3.7.0. Sensitive information, such tokens and other secrets could be readable and exposed from the rsyslog configuration file, which has set the wrong world-readable permissions. The highest threat from this vulnerability is to confidentiality. This is fixed in Ansible version 3.7.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ansible Tower | Versions non publiées |
Autres CVE de Ansible Tower
Les 4 CVE de Ansible Tower →
CVE-2016-7070
A privilege escalation flaw was found in the Ansible Tower
8.0
Élevée
CVE-2017-7528
Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection
5.2
Moyenne
CVE-2017-12148
A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories
8.4
Élevée