Security Advisory

CVE-2018-16879

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-01-03 14:00:00

Last updated 2024-08-05 10:32:54

Assigner redhat

CVSS score 7.3

State PUBLISHED

Description

Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting projects or inventory files.

← Browse all CVEs View on cve.org ↗