Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-3869
7.2
HIGHCVSS v3
Published
March 28, 2019
CVSS v2
4 MEDIUM
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges.
ansible/awx
GitHubAWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is one of the upstream projects for Red Hat Ansible Automation Platform.
GitHubAWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is one of the upstream projects for Red Hat Ansible Automation Platform.NVD