A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the 'delete before update' flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2018-07-27T16:00:00

Updated: 2024-08-05T18:28:16.619Z

Reserved: 2017-08-01T00:00:00

Link: CVE-2017-12148

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-07-27T16:29:00.223

Modified: 2024-11-21T03:08:55.947

Link: CVE-2017-12148

cve-icon Redhat

Severity : Important

Publid Date: 2017-09-19T00:00:00Z

Links: CVE-2017-12148 - Bugzilla