Red Hat Security Advisory: Red Hat Ansible Tower 3.6.1-1 - EL7 Container
view advisory published 2019-11-25
Red Hat Ansible Tower 3.6.1-1 - EL7 Container
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-14890US | high8.4OT elevated | — | ||
A vulnerability was found in Ansible Tower before 3.6.1 where an attacker with low privilege could retrieve usernames and passwords credentials from the new RHSM saved in plain tex… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- Fixedansible-tower-36/ansible-tower@sha256:bfc301f3d789f1c1d9cede65934015124447bba752b8033b68ab9e60156e81aa_amd64 as a component of Red Hat Ansible Tower 3.6 for RHEL 7
For information on upgrading Ansible Tower, reference the Ansible Tower Upgrade and Migration Guide: https://docs.ansible.com/ansible-tower/latest/html/upgrade-migration-guide/index.html
https://access.redhat.com/errata/RHSA-2019:3958 - Workaroundansible-tower-36/ansible-tower@sha256:bfc301f3d789f1c1d9cede65934015124447bba752b8033b68ab9e60156e81aa_amd64 as a component of Red Hat Ansible Tower 3.6 for RHEL 7
There is no mitigation for this issue since this issue happens when Red Hat license is applied.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan