Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2018-05-02T19:00:00Z
Updated: 2024-09-16T19:09:02.633Z
Reserved: 2017-12-04T00:00:00
Link: CVE-2018-1104
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-05-02T19:29:00.607
Modified: 2024-11-21T03:59:11.410
Link: CVE-2018-1104
Redhat