← CVE Intelligence

CVE-2019-3869

Red Hat / Tower PUBLISHED

Description (CNA)

When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges.

Affected (CNA)

Vendor / productVersions
Red Hat / Toweraffected 3.3.5; affected 3.4.3

CWE

CWE-214

References

ADP enrichment

CVE

No English description supplied.