CVE-2021-4112CWE-552

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape

published August 25, 2022

CVSS
—
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2022-08-25T19:35Z
EPSS history
Timeline
  • 25 AUG 19:35Z
    A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape
    cvelistv5