Vulnerability Name:

CVE-2020-14327 (CCN-202722)

Assigned:2020-06-17
Published:2021-02-16
Updated:2021-06-07
Summary:A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Functionality on the Tower server is abused by supplying a URL that could lead to the server processing it. This flaw leads to the connection to internal services or the exposure of additional internal services by abusing the test feature of lookup credentials to forge HTTP/HTTPS requests from the server and retrieving the results of the response.
CVSS v3 Severity:5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): None
Availibility (A): None
5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): None
Availibility (A): None
CVSS v2 Severity:2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:N/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): None
Availibility (A): None
Vulnerability Type:CWE-918
Vulnerability Consequences:Obtain Information
References:Source: MITRE
Type: CNA
CVE-2020-14327

Source: CCN
Type: Red Hat Bugzilla – Bug 1856785
(CVE-2020-14327) - CVE-2020-14327 Tower: SSRF: Server Side Request Forgery on Credential

Source: MISC
Type: Issue Tracking, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1856785

Source: XF
Type: UNKNOWN
ansible-cve202014327-ssrf(202722)

Source: CCN
Type: Ansible Web site
Ansible is Simple IT Automation

Vulnerable Configuration:Configuration 1:
  • cpe:/a:redhat:ansible_tower:*:*:*:*:*:*:*:* (Version < 3.6.5)
  • OR cpe:/a:redhat:ansible_tower:*:*:*:*:*:*:*:* (Version >= 3.7.0 and < 3.7.2)

    • Configuration CCN 1:
  • cpe:/a:redhat:ansible_tower:3.7.1:*:*:*:*:*:*:*
  • OR cpe:/a:redhat:ansible_tower:3.6.4:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    redhat ansible tower *
    redhat ansible tower *
    redhat ansible tower 3.7.1
    redhat ansible tower 3.6.4