CVE-2019-19340

CVE-2019-19340 affects Ansible Tower: enabling RabbitMQ manager via -e rabbitmq_enable_manager=true exposes the RabbitMQ management interface publicly. If the default admin user remains active, an attacker could guess the password and gain access. Affected: Tower 3.5.x before 3.5.3 and 3.6.x befo...

Important: Red Hat Security Advisory: Red Hat Ansible Tower 3.5.4-1 - RHEL7 Container

Red Hat Ansible Tower 3.5.4-1 - RHEL7 Container Added a command to generate a new SECRETKEY and rekey the database Removed the guest user from the optionally-configured RabbitMQ admin interface CVE-2019-19340 Fixed assorted issues with preserving permissions in the Ansible Tower backup playbook...

CVE-2018-19340

CVE-2018-19340 affects Guriddo Form PHP 5.3. It describes a cross-site scripting (XSS) vulnerability exposed through the demos/jqform/defaultnodb/default.php page, specifically via the OrderID, ShipName, ShipAddress, ShipCity, ShipPostalCode, ShipCountry, Freight, or details parameters. The vulne...