{"id":"CVE-2019-3869","aliases":["EUVD-2019-13482","GHSA-9qmx-gcjw-jrg2","RHSA-2019:0796"],"status":"published","title":"When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed...","description":"When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges.","severity":{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01266,"percentile":0.6993,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-214"],"published":"2019-03-28T13:04:59Z","modified":"2026-06-28T10:29:00Z","affected":[{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"ansible-tower","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.3-1.el7at"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"ansible-tower-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.3-1.el7at"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"ansible-tower-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.3-1.el7at"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"ansible-tower-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.3-1.el7at"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"ansible-tower-venv-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.3-1.el7at"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"ansible-tower-venv-tower","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.3-1.el7at"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.3.3-1.el7cf"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-amazon-smartstate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.3.3-1.el7cf"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.3.3-1.el7cf"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-appliance-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.3.3-1.el7cf"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-appliance-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.3.3-1.el7cf"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-appliance-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.3.3-1.el7cf"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.3.3-1.el7cf"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-gemset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.3.3-1.el7cf"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.10::el7","package":"cfme-gemset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.3.3-1.el7cf"}]}],"bundled":3}],"products":[{"vendor":"red hat","product":"tower"},{"vendor":"redhat","product":"ansible_tower"}],"references":[{"url":"https://github.com/ansible/awx/pull/3505","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3869","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3869","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9qmx-gcjw-jrg2"},{"url":"https://access.redhat.com/errata/RHSA-2019:0796","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.7/html/release_notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1678385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1680959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1694190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1694798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1698586","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0796.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-3869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688508","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3869","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-5418","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5418","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5418","tags":["advisory"]},{"url":"https://github.com/mpgn/CVE-2019-5418","tags":["article"]},{"url":"https://groups.google.com/forum/#!msg/rubyonrails-security/pFRKI96Sm8Q/IhpRq9D2CgAJ","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-5419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5419","tags":["advisory"]},{"url":"https://groups.google.com/forum/#!msg/rubyonrails-security/GN7w9fFAQeI/0iQIiLP2CgAJ","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2019-3869","description":"When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges.","status":"published","published":"2019-03-28T13:04:59Z","modified":"2024-08-04T19:19:18.595Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-214"],"updated_at":"2026-11-02T14:20:22.701371Z"}],"euvd":[{"id":"EUVD-2019-13482","description":"When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges.","status":"published","published":"2019-03-28T13:04:59Z","modified":"2024-08-04T19:19:18Z","cvss":[{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:06:54.939848Z"}],"ghsa":[{"id":"GHSA-9qmx-gcjw-jrg2","title":"When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed...","description":"When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges.","status":"published","published":"2022-05-13T01:26:23Z","modified":"2023-02-01T05:07:45Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:50:36.100181Z"}],"nvd":[{"id":"CVE-2019-3869","description":"When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges.","status":"published","published":"2019-03-28T14:29:00.307Z","modified":"2026-06-17T02:35:46.267Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-214","CWE-200"],"updated_at":"2026-11-02T14:05:09.523883Z"}],"osv":[{"id":"RHSA-2019:0796","title":"Red Hat Security Advisory: CloudForms 4.7.3 security, bug fix and enhancement update","status":"published","published":"2024-09-13T14:07:54Z","modified":"2026-06-28T10:29:00Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"}]}}