https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:29:37 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-36015 cnvd-2017-36015 https://cve.radiocsirt.org/vuln/cnvd-2017-36015 https://cve.radiocsirt.org/vuln/euvd-2026-76981 EUVD-2026-76981 https://cve.radiocsirt.org/vuln/euvd-2026-76981 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12148 <p>A flaw was found in Ansible Tower&#39;s interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the &#39;delete before update&#39; flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as.</p> <p>A flaw was found in Ansible Tower&#39;s interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the &#39;delete before update&#39; flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-12148 https://cve.radiocsirt.org/vuln/ghsa-fxg8-q29x-8w2q <p>A flaw was found in Ansible Tower&#39;s interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the &#39;delete before update&#39; flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as.</p> <p>A flaw was found in Ansible Tower&#39;s interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the &#39;delete before update&#39; flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as.</p> https://cve.radiocsirt.org/vuln/ghsa-fxg8-q29x-8w2q https://cve.radiocsirt.org/vuln/gsd-2017-12148 gsd-2017-12148 https://cve.radiocsirt.org/vuln/gsd-2017-12148 https://cve.radiocsirt.org/vuln/rhsa-2017:3005 <p>supervisor: Command injection via malicious XML-RPC request Tower: modification of git hooks in SCM repo via upstream playbook execution</p> <p>supervisor: Command injection via malicious XML-RPC request Tower: modification of git hooks in SCM repo via upstream playbook execution</p> https://cve.radiocsirt.org/vuln/rhsa-2017:3005