Lucene search

RedhatCVE-2021-4112

HistoryAug 25, 2022 - 8:15 p.m.

CVE-2021-4112

2022-08-2520:15:09

CWE-552

redhat

web.nvd.nist.gov

cve-2021-4112

ansible-tower

vulnerability

privilege escalation

job isolation escape

awx user

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

Percentile

12.6%

JSON

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

Affected configurations

Nvd

Vulners

Node

redhatansible_automation_platform_early_accessMatch2.0

redhatansible_automation_platform_text-only_advisoriesMatch-

redhatansible_towerMatch3.0

Node

redhatenterprise_linuxMatch8.0

AND

redhatansible_automation_platformMatch2.0

redhatansible_automation_platformMatch2.1

VendorProductVersionCPE
redhatansible_automation_platform_early_access2.0cpe:2.3:a:redhat:ansible_automation_platform_early_access:2.0:*:*:*:*:*:*:*
redhatansible_automation_platform_text-only_advisories-cpe:2.3:a:redhat:ansible_automation_platform_text-only_advisories:-:*:*:*:*:*:*:*
redhatansible_tower3.0cpe:2.3:a:redhat:ansible_tower:3.0:*:*:*:*:*:*:*
redhatenterprise_linux8.0cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
redhatansible_automation_platform2.0cpe:2.3:a:redhat:ansible_automation_platform:2.0:*:*:*:*:*:*:*
redhatansible_automation_platform2.1cpe:2.3:a:redhat:ansible_automation_platform:2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	ansible_automation_platform_early_access	2.0	cpe:2.3:a:redhat:ansible_automation_platform_early_access:2.0:::::::*
redhat	ansible_automation_platform_text-only_advisories	-	cpe:2.3:a:redhat:ansible_automation_platform_text-only_advisories:-:::::::*
redhat	ansible_tower	3.0	cpe:2.3:a:redhat:ansible_tower:3.0:::::::*
redhat	enterprise_linux	8.0	cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
redhat	ansible_automation_platform	2.0	cpe:2.3:a:redhat:ansible_automation_platform:2.0:::::::*
redhat	ansible_automation_platform	2.1	cpe:2.3:a:redhat:ansible_automation_platform:2.1:::::::*

CNA Affected

[
  {
    "product": "ansible-tower",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in ansible-tower 3.8.5"
      }
    ]
  }
]