Read the docs
Red Hat Security Advisory

RHSA-2019:3958

Red Hat Ansible Tower 3.6.1-1 - EL7 Container

Released 2019-11-25 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 36

A vulnerability was found in Ansible Tower before 3.6.1 where an attacker with low privilege could retrieve usernames and passwords credentials from the new RHSM saved in plain text into the database at '/api/v2/config'…

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00237 Published 2019-11-26 Fixed CWE-312