VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Dec 19, 2019· Updated Jun 17, 2026

CVE-2019-19341

CVE-2019-19341

Description

A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable. These files include both the SECRET_KEY and the database backup. Any user with access to the Tower server, and knowledge of when a backup is run, could retrieve every credential stored in Tower. Access to data is the highest threat with this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Red Hat/Ansible Tower
    cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*
    Range: >=3.6.0,<3.6.2
  • Ansible/Towerllm-fuzzy
    Range: <3.6.2
  • RedHat/Towerv5
    Range: all ansible_tower versions 3.6.x before 3.6.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.