CVE-2018-1104CWE-20

CVE-2018-1104: vulnerability in Red Hat, Inc. Ansible Tower

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.5%
Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server.
Related CVEs — Red Hat, Inc. Ansible Tower

In the same product, most dangerous first.