RHSA-2021:0778HighCVSS 6.7

Red Hat Security Advisory: Red Hat Ansible Tower 3.6.7-1 - Container security and bug fix update

Published
March 9, 2021
Last Modified
August 7, 2026

🔗 CVE IDs covered (5)

CVE-2021-20253 →CVE-2019-20372 →CVE-2020-11022 →CVE-2020-11023 →CVE-2020-35678 →

📋 Description

CVE-2019-20372 — nginx: HTTP request smuggling in configurations with URL redirect used as error_page CVE-2020-11022 — jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method CVE-2020-11023 — jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-35678 — python-autobahn: allows redirect header injection CVE-2021-20253 — ansible-tower: Privilege escalation via job isolation escape

🎯 Affected products2

  • Red Hat Ansible Tower 3.6 for RHEL 7
  • ansible-tower-36/ansible-tower@sha256:b693ff9d898bc14a776b881bc8c868a7c3472456d6f009bb81d4dd5f85835e28_amd64 as a component of Red Hat Ansible Tower 3.6 for RHEL 7

✅ Remediation

For information on upgrading Ansible Tower, reference the Ansible Tower Upgrade and Migration Guide: https://docs.ansible.com/ansible-tower/latest/html/upgrade-migration-guide/index.html Workaround: To mitigate this issue, use a named location instead of having the error_page handler do the redirect, this configuration is not vulnerable to request smuggling on all versions of NGINX we tested. server { listen 80; server_name localhost; error_page 401 @401; location / { return 401; } location @401 { return 302 http://example.org; } } Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.

🔗 References (8)