CVE-2019-19340 Misconfiguration in Tower

High 8.2 Published 19 Dec 2019 Updated 5 Aug 2024

Enabling the RabbitMQ manager exposes the interface, allowing attackers to guess default admin credentials and gain system access.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-19340?

CVE-2019-19340 is a high-severity vulnerability in Redhat Ansible Tower, published on 19 Dec 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager by setting it with '-e rabbitmq_enable_manager=true' exposes the RabbitMQ management interface publicly, as expected. If the default admin user is still active, an attacker could guess the password and gain access to the system.

Weakness: CWE-1188

Which versions are affected by CVE-2019-19340?

It affects 2 products.

Products include Redhat Ansible Tower, Redhat Enterprise Linux.

How do I fix CVE-2019-19340?

No fix has been published for CVE-2019-19340 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-19340 being exploited?

There is no known exploitation of CVE-2019-19340 in the wild and no public exploit code.

All Redhat Ansible Tower vulnerabilities

Sources

Also known as GHSA-7844-v3mr-c966.