CVE-2018-10884

Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF) in awx/api/authentication.py. An attacker could exploit this by tricking already authenticated users into visiting a malicious site and hijacking the authtoken cookie.
References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10884 Issue Tracking Vendor Advisory
http://www.securityfocus.com/bid/105136 Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*

Information

Published : 2018-08-22 07:29

Updated : 2019-10-09 16:33


NVD link : CVE-2018-10884

Mitre link : CVE-2018-10884


JSON object : View

CWE
CWE-352

Cross-Site Request Forgery (CSRF)

Advertisement

dedicated server usa

Products Affected

redhat

  • ansible_tower