CVSS 3.0
8.8 highCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2018-1104
High (8.8) in redhat. EPSS 2.5% chance of exploitation in the next 30 days.
Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server.
Severity
- EPSS
- 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-94, CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:ansible_tower
- redhat:cloudforms