CVE-2017-12148
published 2018-07-27CVE-2017-12148: A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the…
PriorityP344high7.2CVSS 3.0
AVNACLPRHUINSUCHIHAH
EPSS
1.71%
74.7th percentile
A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the 'delete before update' flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| red_hat | ansible_tower | — | — |
| red_hat | ansible_tower | — | — |
| redhat | ansible_tower | < 3.1.5 | 3.1.5 |
| redhat | ansible_tower | < 3.2.0 | 3.2.0 |
| redhat | cloudforms | — | — |
CVSS provenance
nvdv3.07.2HIGHCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
vendor_redhat8.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fxg8-q29x-8w2q: A flaw was found in Ansible Tower's interface before 3
ghsa_unreviewed·2022-05-13
CVE-2017-12148 [HIGH] CWE-20 GHSA-fxg8-q29x-8w2q: A flaw was found in Ansible Tower's interface before 3
A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the 'delete before update' flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as.
Red Hat
Tower: modification of git hooks in SCM repo via upstream playbook execution
vendor_redhat·2017-09-19·CVSS 8.4
CVE-2017-12148 [HIGH] CWE-20 Tower: modification of git hooks in SCM repo via upstream playbook execution
Tower: modification of git hooks in SCM repo via upstream playbook execution
A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the 'delete before update' flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as.
A flaw was found in Tower's interface with SCM repositories. If a Tower project (SCM repository) definition does not have the 'delete before update' flag set, an attacker with commit access to the upstream playbook source repository cou
No detection rules found.
No public exploits indexed.
2018-07-27
Published