CVE-2015-1482

Ansible Tower < 2.0.4 - Unauthenticated Sensitive Information Exposure via WebSocket Connection

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-1482. PoCs published by SEC Consult.

AI-analyzed exploit summary The advisory details multiple vulnerabilities in Ansible Tower <=2.0.2, including privilege escalation via the 'is_superuser' parameter, reflected XSS in API endpoints, and unauthenticated WebSocket connections leading to information leakage. Proof-of-concept requests and steps are provided for each vulnerability.

Description

Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and obtain sensitive information via a websocket connection to socket.io/1/.

Exploits (1)

exploitdb WRITEUP

by SEC Consult · textwebappsmultiple

https://www.exploit-db.com/exploits/35786

View Code ZIP pw:eip

The advisory details multiple vulnerabilities in Ansible Tower <=2.0.2, including privilege escalation via the 'is_superuser' parameter, reflected XSS in API endpoints, and unauthenticated WebSocket connections leading to information leakage. Proof-of-concept requests and steps are provided for each vulnerability.

Classification

Writeup 100%

Attack Type

Lpe | Xss | Info Leak | Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: Ansible Tower <=2.0.2

Auth required

Prerequisites: Organization admin access for privilege escalation · Network access to the target for XSS and WebSocket exploitation

MITRE ATT&CK