Description
Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Ansible Tower | through version 3.2.3 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat CloudForms 5 | ansible +1 | 2.4.4.0-1.el7ae | RHSA-2018:1972, RHSA-2018:1328 |
| Red Hat CloudForms 5 | ansible-tower +3 | 3.2.4-1.el7at | RHSA-2018:1328 |
| Red Hat CloudForms 5 | ansible-tower-setup +1 | 3.1.7-1.el7at | RHSA-2018:1972, RHSA-2018:1328 |
| Red Hat CloudForms 5 | cfme +2 | 5.8.4.5-1.el7cf | RHSA-2018:1972, RHSA-2018:1328 |
| Red Hat CloudForms 5 | cfme-appliance-tools +2 | 5.9.2.4-1.el7cf | RHSA-2018:1328 |
| Red Hat CloudForms 5 | dbus-api-service | 1.0.1-3.el7cf | RHSA-2018:1328 |
| Red Hat CloudForms 5 | httpd-configmap-generator | 0.2.1-2.el7cf | RHSA-2018:1328 |
| Red Hat CloudForms 5 | postgresql96 +9 | 9.6.6-1PGDG.el7 | RHSA-2018:1328 |
| Red Hat CloudForms 5 | python-paramiko +1 | 2.1.1-4.el7 | RHSA-2018:1972, RHSA-2018:1328 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-json +1 | 2.1.0-1.el7cf | RHSA-2018:1972, RHSA-2018:1328 |
| Red Hat CloudForms 5 | rh-ruby23-rubygem-qpid_proton +1 | 0.22.0-2.el7cf | RHSA-2018:1328 |
Advisories 2
- RHSA-2018:1972 Red Hat Security Advisory: Red Hat CloudForms security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2018:1328 Red Hat Security Advisory: CloudForms 4.6.2 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026