high7.2
CVE-2019-3869
When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables.
Impact
When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Ansible Tower | before 3.3.5 from 3.4.0 before 3.4.3 |