CVE-2020-10709
published 2021-05-27CVE-2020-10709: A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication…
PriorityP335high7.1CVSS 3.1
AVLACLPRLUINSUCHIHAN
EPSS
0.27%
19.3th percentile
A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to Ansible Tower, which allows any user that can gain access to the token to be fully authenticated to Ansible Tower. This flaw affects Ansible Tower versions before 3.6.4 and Ansible Tower versions before 3.5.6.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | ansible_tower | < 3.5.6 | 3.5.6 |
| redhat | ansible_tower | — | — |
| redhat | ansible_tower | >= 3.6.0 < 3.6.4 | 3.6.4 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
nvdv2.03.6LOWAV:L/AC:L/Au:N/C:P/I:P/A:N
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g252-frw3-5wcr: A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application
ghsa_unreviewed·2022-05-24
CVE-2020-10709 [HIGH] CWE-287 GHSA-g252-frw3-5wcr: A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application
A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to Ansible Tower, which allows any user that can gain access to the token to be fully authenticated to Ansible Tower. This flaw affects Ansible Tower versions before 3.6.4 and Ansible Tower versions before 3.5.6.
Red Hat
Tower: OAuth2 refresh tokens do not respect the expiration
vendor_redhat·2020-04-07·CVSS 7.1
CVE-2020-10709 [HIGH] CWE-287 Tower: OAuth2 refresh tokens do not respect the expiration
Tower: OAuth2 refresh tokens do not respect the expiration
A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire. The original token granted to the user still has access to Ansible Tower, which allows any user that can gain access to the token to be fully authenticated to Ansible Tower. This flaw affects Ansible Tower versions before 3.6.4 and Ansible Tower versions before 3.5.6.
A security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2 application. Ansible Tower uses the token to provide authentication. This flaw allows an attacker to obtain a refresh token that does not expire
No detection rules found.
No public exploits indexed.
2021-05-27
Published