https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 19:04:05 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-46771 cnvd-2019-46771 https://cve.radiocsirt.org/vuln/cnvd-2019-46771 https://cve.radiocsirt.org/vuln/euvd-2026-59248 EUVD-2026-59248 https://cve.radiocsirt.org/vuln/euvd-2026-59248 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19342 <p>A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the &#39;#&#39; character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose will occur in plaintext. An attacker could easily guess some predictable passwords or brute force the password.</p> <p>A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the &#39;#&#39; character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose will occur in plaintext. An attacker could easily guess some predictable passwords or brute force the password.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-19342 https://cve.radiocsirt.org/vuln/ghsa-85r5-c7pw-c69h <p>A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the &#39;#&#39; character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose will occur in plaintext. An attacker could easily guess some predictable passwords or brute force the password.</p> <p>A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the &#39;#&#39; character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose will occur in plaintext. An attacker could easily guess some predictable passwords or brute force the password.</p> https://cve.radiocsirt.org/vuln/ghsa-85r5-c7pw-c69h https://cve.radiocsirt.org/vuln/gsd-2019-19342 gsd-2019-19342 https://cve.radiocsirt.org/vuln/gsd-2019-19342 https://cve.radiocsirt.org/vuln/rhsa-2019:4242 <p>Tower: enabling RabbitMQ manager in the installer exposes the management interface publicly Tower: intermediate files during Tower backup are world-readable Tower: special characters in RabbitMQ passwords causes web socket 500 error</p> <p>Tower: enabling RabbitMQ manager in the installer exposes the management interface publicly Tower: intermediate files during Tower backup are world-readable Tower: special characters in RabbitMQ passwords causes web socket 500 error</p> https://cve.radiocsirt.org/vuln/rhsa-2019:4242 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1810 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Ansible Tower ausnutzen, um Informationen offenzulegen und um Sicherheitsmechanismen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Ansible Tower ausnutzen, um Informationen offenzulegen und um Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1810