Aller au contenu
en Se connecter
8.2 Élevée

CVE-2019-19340 A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager…

Description

A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager by setting it with '-e rabbitmq_enable_manager=true' exposes the RabbitMQ management interface publicly, as expected. If the default admin user is still active, an attacker could guess the password and gain access to the system.

Produits et versions touchés

Produit Versions touchées Corrigé en
Tower Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Tower

Les 3 CVE de Tower →
CVE-2019-19342 A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested… 5.3 Moyenne CVE-2019-3869 When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via… 7.2 Élevée
Suivre cette CVE