Red Hat, Inc. Ansible Tower vulnerabilities

2 vulnerabilities

Known vulnerabilities in Red Hat, Inc. Ansible Tower, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2018-1104red hat, inc.ansible tower+2
EPSS score
2.47%
Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server.7.2CVE-2018-1101red hat, inc.ansible tower+2
EPSS score
1.94%
Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrators access to the entire system.