ansible-tower-setup vulnerabilities

Known vulnerabilities in the ansible-tower-setup package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Improper Access Control	<0:3.1.5-3.el7at
H Missing Authorization	<0:3.1.3-1.el7at
H Improper Access Control	<0:3.1.3-1.el7at
H Improper Access Control	<0:3.1.3-1.el7at
H Information Exposure	<0:3.1.3-1.el7at
M Cross-site Scripting (XSS)	<0:3.1.5-3.el7at
M Improper Certificate Validation	<0:3.1.2-1.el7at
M Use of Hard-coded Credentials	<0:3.1.2-1.el7at
H Improper Input Validation	<0:3.1.5-1.el7at
M Improper Input Validation	<0:3.2.7-1.el7at
H Improper Access Control	<0:3.1.8-1.el7at
H Improper Input Validation	<0:3.1.7-1.el7at
H Improper Input Validation	<0:3.2.4-1.el7at
H Incorrect Privilege Assignment	<0:3.1.7-1.el7at
H Incorrect Privilege Assignment	<0:3.2.4-1.el7at
H Directory Traversal	<0:3.1.8-1.el7at
M Cross-site Scripting (XSS)	<0:3.1.5-3.el7at
H Arbitrary Command Injection	<0:3.1.5-1.el7at
M Information Exposure Through Log Files	<0:3.2.5-1.el7at
M Cross-site Scripting (XSS)	<0:3.3.3-1.el7at
M Cross-site Scripting (XSS)	<0:3.3.3-1.el7at
M Cross-site Scripting (XSS)	<0:3.3.3-1.el7at
M Cross-site Scripting (XSS)	<0:3.3.3-1.el7at
M XML External Entity (XXE) Injection	<0:3.3.3-1.el7at
M XML External Entity (XXE) Injection	<0:3.3.3-1.el7at
M Cross-site Scripting (XSS)	<0:3.5.2-1.el7at
M Cross-site Scripting (XSS)	<0:3.5.2-1.el7at
M Improper Authorization	<0:3.5.1-1.el7at
M Improper Authorization	<0:3.5.1-1.el7at
H Improper Input Validation	<0:3.4.3-1.el7at
H Improper Input Validation	<0:3.4.3-1.el7at
H Information Exposure	<0:3.4.3-1.el7at
H Information Exposure	<0:3.4.3-1.el7at
H Information Exposure	<0:3.4.3-1.el7at
H Information Exposure	<0:3.4.3-1.el7at
L Man-in-the-Middle (MitM)	<0:3.4.1-2.el7at
L Man-in-the-Middle (MitM)	<0:3.4.1-2.el7at
M Cross-site Scripting (XSS)	<0:3.3.3-1.el7at
M Cross-site Scripting (XSS)	<0:3.3.3-1.el7at
H Improper Authentication	<0:3.2.4-1.el7at
H Improper Authentication	<0:3.1.7-1.el7at
M Cross-site Scripting (XSS)	<0:3.5.2-1.el7at
M Cross-site Scripting (XSS)	<0:3.5.2-1.el7at
L Insecure Temporary File	<0:3.5.0-1.el7at
L Insecure Temporary File	<0:3.5.0-1.el7at

Vulnerability

Vulnerable Version

Improper Access Control

<0:3.1.5-3.el7at

Missing Authorization

<0:3.1.3-1.el7at

Improper Access Control

<0:3.1.3-1.el7at

Improper Access Control

<0:3.1.3-1.el7at

Information Exposure

<0:3.1.3-1.el7at