CVE-2018-1101CWE-266

Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation

published May 2, 2018

CVSS
—
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrators access to the entire system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01942 · 79.9th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2018-05-02T18:00Z
EPSS history
Timeline
  • 02 MAY 18:00Z
    Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation
    cvelistv5