Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and obtain sensitive information via a websocket connection to socket.io/1/.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ansible Tower 身份验证绕过漏洞
Vulnerability Description
Ansible是美国Ansible公司的一款计算机系统配置管理器,它可用于发布、管理和编排计算机系统。Ansible Tower(又名Ansible UI)是其中的一个提供了用户界面(UI)、仪表板和REST API的任务控制应用程序。 Ansible Tower 2.0.5之前版本中存在安全漏洞。远程攻击者可借助socket.io/1/ URI的websocket连接利用该漏洞绕过身份验证,获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A