A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the /api/v2/labels/ endpoint. This flaw allows users from other organizations in the system to retrieve any label from the organization and also disclose organization names. The highest threat from this vulnerability is to confidentiality.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1856787 | Issue Tracking Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2021-05-27T19:44:48
Updated: 2021-05-27T19:44:48
Reserved: 2020-06-17T00:00:00
Link: CVE-2020-14329
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-05-27T20:15:07.837
Modified: 2021-06-07T18:37:02.143
Link: CVE-2020-14329
JSON object: View
Redhat Information
No data.
CWE