https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 15:46:59 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-33329 cnvd-2020-33329 https://cve.radiocsirt.org/vuln/cnvd-2020-33329 https://cve.radiocsirt.org/vuln/euvd-2026-40006 EUVD-2026-40006 https://cve.radiocsirt.org/vuln/euvd-2026-40006 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10709 <p>A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to Ansible Tower, which allows any user that can gain access to the token to be fully authenticated to Ansible Tower. This flaw affects Ansible Tower versions before 3.6.4 and Ansible Tower versions before 3.5.6.</p> <p>A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to Ansible Tower, which allows any user that can gain access to the token to be fully authenticated to Ansible Tower. This flaw affects Ansible Tower versions before 3.6.4 and Ansible Tower versions before 3.5.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-10709 https://cve.radiocsirt.org/vuln/ghsa-g252-frw3-5wcr <p>A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to Ansible Tower, which allows any user that can gain access to the token to be fully authenticated to Ansible Tower. This flaw affects Ansible Tower versions before 3.6.4 and Ansible Tower versions before 3.5.6.</p> <p>A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to Ansible Tower, which allows any user that can gain access to the token to be fully authenticated to Ansible Tower. This flaw affects Ansible Tower versions before 3.6.4 and Ansible Tower versions before 3.5.6.</p> https://cve.radiocsirt.org/vuln/ghsa-g252-frw3-5wcr https://cve.radiocsirt.org/vuln/gsd-2020-10709 gsd-2020-10709 https://cve.radiocsirt.org/vuln/gsd-2020-10709