high8.2
CVE-2019-19340
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager by setting it with '-e rabbitmq_enable_m…
Impact
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager by setting it with '-e rabbitmq_enable_manager=true' exposes the RabbitMQ management interface publicly, as expected. If the default admin user is still active, an attacker could guess the password and gain access to the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Ansible Tower | from 3.5.0 before 3.5.3 from 3.6.0 before 3.6.2 |
| Redhat | Enterprise Linux | Version 7.0 |