High severity8.8NVD Advisory· Published May 2, 2018· Updated Jun 17, 2026
CVE-2018-1104
CVE-2018-1104
Description
Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*range: <=3.2.3
- (no CPE)range: <=3.2.3
cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:cloudforms:4.6:*:*:*:*:*:*:*
- Red Hat, Inc./Ansible Towerv5Range: through version 3.2.3
Patches
Vulnerability mechanics
References
5- access.redhat.com/errata/RHSA-2018:1328nvdVendor Advisory
- access.redhat.com/errata/RHSA-2018:1972nvdVendor Advisory
- access.redhat.com/security/cve/cve-2018-1104nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
- www.ansible.com/securitynvdVendor Advisory
News mentions
0No linked articles in our index yet.