CWE Code: 255
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Credentials Management
Summary: when running tower before 3.4.3 on openshift or kubernetes, application credentials are exposed to playbook job runs via environment variables. a malicious user with the ability to write playbooks could use this to gain administrative privileges.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2019-03-28
Last Modified Date: 2019-10-09