high8.8
CVE-2021-4112
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape.
Impact
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Ansible Automation Platform Early Access | Version 2.0 |
| Redhat | Ansible Automation Platform Text-Only Advisories | All versions |
| Redhat | Ansible Tower | Version 3.0 |
| Redhat | Ansible Automation Platform | Versions 2.0, 2.1 |