exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Red Hat Security Advisory 2019-3958-01

Red Hat Security Advisory 2019-3958-01
Posted Nov 25, 2019
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2019-3958-01 - Ansible Tower version 3.6.1 suffers from accidental disclosure of username and password amongst other security issues.

tags | advisory
systems | linux, redhat
advisories | CVE-2019-14890
SHA-256 | 590313b8d7ca209829120ffd740d34a5e8d5724a033a69f9039288bc27d623c6

Red Hat Security Advisory 2019-3958-01

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
Red Hat Security Advisory

Synopsis: Critical: Red Hat Ansible Tower 3.6.1-1 - EL7 Container
Advisory ID: RHSA-2019:3958-01
Product: Red Hat Ansible Tower
Advisory URL: https://access.redhat.com/errata/RHSA-2019:3958
Issue date: 2019-11-25
CVE Names: CVE-2019-14890
=====================================================================

1. Summary:

Red Hat Ansible Tower 3.6.1-1 - EL7 Container

2. Description:

Ansible Tower Version 3.6.1
- -----------------------------

- - Fixed accidental disclosure of Red Hat username and password in
/api/v2/config (CVE-2019-14890)
- - Fixed upgrade failure with bundled installer
- - Fixed license check error when reinstalling over a partially-installed
Tower
- - Fixed database restore when using a PostgreSQL pod
- - Fixed error when CA data was missing for a container group credential
- - Fixed error when a container group job was launched when Tower was out
of capacity
- - Fixed a few minor issues in the AWX modules collection

3. Solution:

For information on upgrading Ansible Tower, reference the Ansible Tower
Upgrade and Migration Guide:
https://docs.ansible.com/ansible-tower/latest/html/upgrade-migration-guide/
index.html

4. Bugs fixed (https://bugzilla.redhat.com/):

1773622 - CVE-2019-14890 Tower: RHSM username and password exposed after license application

5. References:

https://access.redhat.com/security/cve/CVE-2019-14890
https://access.redhat.com/security/updates/classification/#critical

6. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2019 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=t1tw
-----END PGP SIGNATURE-----

--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
Login or Register to add favorites

File Archive:

July 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    27 Files
  • 2
    Jul 2nd
    10 Files
  • 3
    Jul 3rd
    35 Files
  • 4
    Jul 4th
    27 Files
  • 5
    Jul 5th
    18 Files
  • 6
    Jul 6th
    0 Files
  • 7
    Jul 7th
    0 Files
  • 8
    Jul 8th
    28 Files
  • 9
    Jul 9th
    44 Files
  • 10
    Jul 10th
    24 Files
  • 11
    Jul 11th
    25 Files
  • 12
    Jul 12th
    11 Files
  • 13
    Jul 13th
    0 Files
  • 14
    Jul 14th
    0 Files
  • 15
    Jul 15th
    0 Files
  • 16
    Jul 16th
    0 Files
  • 17
    Jul 17th
    0 Files
  • 18
    Jul 18th
    0 Files
  • 19
    Jul 19th
    0 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close