← Database

CVE-2021-4112

HIGH CVSS: 8.8 Published: 2022-08-25 Modified: 2026-06-17

Description

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

Affected Platforms

Redhat Ansible TowerRedhat Enterprise LinuxRedhat Ansible Automation PlatformRedhat Ansible Automation Platform Text-Only AdvisoriesRedhat Ansible Automation Platform Early Access

Weakness Type

CWE-552, CWE-552

References