Ansible Tower Уязвимости

Временная шкала

Версия

3.6.07
3.6.17
3.5.05
3.5.15
3.5.25

Устранение последствий

Official Fix20
Temporary Fix0
Workaround0
Unavailable0
Not Defined12

Эксплуатационная пригодность

High0
Functional0
Proof-of-Concept3
Unproven0
Not Defined29

Вектор доступа

Not Defined0
Physical0
Local7
Adjacent11
Network14

Аутентификация

Not Defined0
High1
Low21
None10

Взаимодействие с пользователем

Not Defined0
Required8
None24

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤47
≤54
≤69
≤78
≤83
≤91
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤48
≤54
≤610
≤76
≤83
≤91
≤100

VulDB

≤10
≤20
≤33
≤48
≤56
≤67
≤76
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤54
≤63
≤71
≤83
≤97
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Поставщик

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Эксплойт 0-дня

<1k1
<2k0
<5k12
<10k10
<25k9
<50k0
<100k0
≥100k0

Эксплойт сегодня

<1k23
<2k2
<5k2
<10k5
<25k0
<50k0
<100k0
≥100k0

Объем рынка эксплойтов

🔴 CTI Деятельность

Affected Versions (49): 0.9, 0.9.1, 2, 2.0.1, 2.0.2, 2.0.3, 3, 3.0, 3.0.1, 3.0.2, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.1.7, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.2.5, 3.2.6, 3.3, 3.3.1, 3.3.2, 3.4, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5, 3.5, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5, 3.6, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.7, 3.7.1, 3.8, 3.8.1

Link to Product Website: https://www.redhat.com/

ОпубликованоBaseTempУязвимости0dayСегодняЭ�RemCTICVE
26.08.20225.55.5Red Hat Ansible Tower Job Isolation эскалация привилегий$5k-$25k$5k-$25kNot DefinedNot Defined0.06CVE-2021-4112
10.06.20216.36.3Red Hat Ansible Tower/Ansible Automation Platform состояние гонки$5k-$25k$5k-$25kNot DefinedNot Defined0.03CVE-2021-3533
10.06.20213.53.5Red Hat Ansible Tower/Ansible Automation Platform Async Status раскрытие информации$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2021-3532
28.05.20215.55.3Red Hat Ansible Tower эскалация привилегий$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-14328
28.05.20215.55.3Red Hat Ansible Tower эскалация привилегий$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2020-14327
28.05.20216.36.0Red Hat Ansible Tower OAuth2 Authentication слабая аутентификация$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2020-10709
28.05.20213.53.4Red Hat Ansible Tower Openshift отказ в обслуживании$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2020-10697
28.05.20213.53.4Red Hat Ansible Tower Endpoint раскрытие информации$0-$5k$0-$5kNot DefinedOfficial Fix0.01CVE-2020-14329
28.05.20213.53.4Red Hat Ansible Tower Job раскрытие информации$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2020-10698
02.04.20213.53.4Red Hat Ansible Tower Modules раскрытие информации$0-$5k$0-$5kNot DefinedOfficial Fix0.01CVE-2021-3447

22 больше записей не показано

Do you need the next level of professionalism?

Upgrade your account now!