All CVEs — page 501 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows a remote client to change global log levels and formatting options, potentially suppressing normal logs and increasing verbosity, impacting operator visibility and operational information access.
The flaw in Ansible Automation Platform allows a user with workflow-admin permission to copy a WorkflowJobTemplate and launch jobs in unauthorized instance groups, including the control-plane, bypassing security boundaries.
A flaw in Ansible Automation Platform's automation-controller allows privileged users to inject malicious environment variables that can hijack process execution flows, potentially leading to arbitrary code execution within execution-environment containers. This occurs due to an incomplete validation of environment variable names that omits critical loader variables like BASH_ENV and LD_PRELOAD.
The flaw allows an administrator to read sensitive secrets like the Django secret key and database password by crafting a specific log message format, which can then be forwarded to an external log aggregator.
The flaw allows an attacker to inject JavaScript code into the HTML output, leading to potential full platform takeover.
The flaw in AWX allows an attacker to inject initContainers, serviceAccountName overrides, and projected service account token volumes, leading to privilege escalation and potential exfiltration of namespace secrets.