| Package | Affected versions | Patched versions |
|---|---|---|
| ansible tower | ≥ 3.4.0, < 3.4.3< 3.3.5 | 3.4.33.3.5 |
When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free