Red Hat Security AdvisoryRHSA-2019:4243
Red Hat Ansible Tower 3.6.2-1 - RHEL7 Container
Released 2019-12-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Tower 3.6 for RHEL 7 ansible-tower-36/ansible-tower
Fixes 3 records
Priority LOW 39
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager by setting it with '-e rabbitmq_enable_manager=true' exposes the RabbitMQ management interface public…
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.01534 · Published 2019-12-19 · Fixed CWE-1188
Priority LOW 26
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the '#' character.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01108 · Published 2019-12-19 · Fixed CWE-209
Priority LOW 25
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00312 · Published 2019-12-19 · Fixed CWE-732
