Ansible kayıtları
ansible üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %25
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2016-9587Kavram kanıtı | Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems.ansible · ansible · CWE-20 | Yüksek8,1 | — | %17,1 | 24 Nis 2018 |
28İzleyin | CVE-2015-1481Kavram kanıtı | Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a superuser account.ansible · tower · CWE-264 | Orta6,5 | — | %6,1 | 4 Şub 2015 |
23İzleyin | CVE-2015-1482Kavram kanıtı | Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and obtain sensitive information via a websockeansible · tower · CWE-200 | Orta5,0 | — | %8,5 | 4 Şub 2015 |
19İzleyin | CVE-2015-1368Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI) before 2.0.5 allow remote attackers to inject arbitraransible · tower · CWE-79 | Orta4,3 | — | %5,2 | 27 Oca 2015 |
- CVE-2016-958737İzleyin
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems.
YüksekCVSS 8,1Kavram kanıtıEPSS %17ansible · ansible24 Nis 2018
- CVE-2015-148128İzleyin
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a superuser account.
OrtaCVSS 6,5Kavram kanıtıEPSS %6ansible · tower4 Şub 2015
- CVE-2015-148223İzleyin
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and obtain sensitive information via a websocke
OrtaCVSS 5,0Kavram kanıtıEPSS %9ansible · tower4 Şub 2015
- CVE-2015-136819İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI) before 2.0.5 allow remote attackers to inject arbitrar
OrtaCVSS 4,3Kavram kanıtıEPSS %5ansible · tower27 Oca 2015