CVE-2020-14328CWE-918

A flaw was found in Ansible Tower in versions before 3.7.2

published May 27, 2021

CVSS
—
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

A flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw can be abused by supplying a URL which could lead to the server processing it connecting to internal services or exposing additional internal services and more particularly retrieving full details in case of error. The highest threat from this vulnerability is to data confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00240 · 14.3th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2021-05-27T19:44Z
EPSS history
Timeline
  • 27 MAY 19:44Z
    A flaw was found in Ansible Tower in versions before 3.7.2
    cvelistv5