Lucene search
PRIOn knowledge basePRION:CVE-2019-19341HistoryDec 19, 2019 - 9:15 p.m.
Design/Logic Flaw
2019-12-1921:15:00
PRIOn knowledge base
www.prio-n.com
5
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in ‘/var/backup/tower’ are left world-readable. These files include both the SECRET_KEY and the database backup. Any user with access to the Tower server, and knowledge of when a backup is run, could retrieve every credential stored in Tower. Access to data is the highest threat with this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ansible_tower | ge | 3.6.0 | |
| ansible_tower | lt | 3.6.2 |
Related
redhatcve
redhatcve
CVE-2019-19341
2019-12-14 00:54:33
cvelist
cvelist
CVE-2019-19341
2019-12-19 20:24:18
symantec
symantec
Ansible Tower CVE-2019-19341 Information Disclosure Vulnerability
2019-12-14 00:00:00
nvd
nvd
CVE-2019-19341
2019-12-19 21:15:14
cve
cve
CVE-2019-19341
2019-12-19 21:15:14
redhat
redhat
(RHSA-2019:4243) Important: Red Hat Ansible Tower 3.6.2-1 - RHEL7 Container
2019-12-16 18:21:29
(RHSA-2019:4242) Important: Red Hat Ansible Tower 3.5.4-1 - RHEL7 Container
2019-12-16 23:21:27
nessus
nessus
Ansible Tower 3.5.x < 3.5.4 / 3.6.x < 3.6.2 Multiple Vulnerabilities
2019-12-20 00:00:00