CVE-2019-19340: high-severity vulnerability in Red Hat Tower
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Ansible Tower exposes the RabbitMQ management interface to the public internet when a configuration option is enabled, and if the default admin credentials are unchanged, an attacker can guess the password and take control of the messaging system.
When RabbitMQ manager is enabled via configuration parameter in Ansible Tower 3.5.x and 3.6.x, the management interface becomes publicly accessible without network restrictions. If default credentials remain unchanged, an attacker can perform brute-force or dictionary attacks to authenticate, potentially gaining administrative access to RabbitMQ and compromising system integrity and availability.
In the same product, most dangerous first.