CVE-2017-12148 : Security Advisory and Response

A vulnerability has been discovered in Ansible Tower versions before 3.1.5 and 3.2.0, affecting the interface related to SCM repositories. This vulnerability could allow an attacker with commit privileges to execute arbitrary commands and code under the Tower user's privileges.

Understanding CVE-2017-12148

This CVE pertains to a security flaw in Ansible Tower versions 3.1.5 and 3.2.0 that could be exploited by an attacker to execute unauthorized commands through forged playbooks.

What is CVE-2017-12148?

The vulnerability in Ansible Tower versions before 3.1.5 and 3.2.0 allows an attacker with commit access to the original playbook source repository to create a malicious playbook. When executed by Tower, this playbook can make unauthorized changes to the cloned SCM repository by adding git hooks, enabling the execution of arbitrary commands and code.

The Impact of CVE-2017-12148

The impact of this vulnerability is rated as HIGH, with a CVSS base score of 8.4. The confidentiality, integrity, and availability of the affected systems are all at risk due to the potential execution of unauthorized commands and code.

Technical Details of CVE-2017-12148

This section provides more technical insights into the vulnerability.

Vulnerability Description

The flaw in Ansible Tower versions before 3.1.5 and 3.2.0 allows attackers to manipulate SCM repositories by injecting malicious git hooks through forged playbooks, leading to unauthorized code execution.

Affected Systems and Versions

Product: Ansible Tower
Vendor: Red Hat
Versions: 3.1.5, 3.2.0

Exploitation Mechanism

Attack Complexity: Low
Attack Vector: Network
Privileges Required: High
User Interaction: Required
Scope: Changed
The attacker needs commit privileges to the original playbook source repository to exploit this vulnerability.

Mitigation and Prevention

To address CVE-2017-12148, follow these mitigation strategies:

Immediate Steps to Take

Update Ansible Tower to versions 3.1.5 or 3.2.0 to patch the vulnerability.
Enable the 'delete before update' option for Tower projects representing SCM repositories.

Long-Term Security Practices

Regularly review and update access controls for SCM repositories.
Conduct security training to educate users on identifying and avoiding malicious activities.

Patching and Updates

Apply security patches and updates provided by Red Hat for Ansible Tower.