CVE-2021-4112
EUVD-2021-3399225.08.2022, 20:15
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | ansible_automation_platform_early_access | 2.0 |
| redhat | ansible_automation_platform_text-only_advisories | - |
| redhat | ansible_tower | 3.0 |
| redhat | ansible_automation_platform | 2.0 |
| redhat | ansible_automation_platform | 2.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration