Lucene search
RedhatCVELIST:CVE-2021-20253HistoryMar 09, 2021 - 5:14 p.m.
CVE-2021-20253
2021-03-0917:14:28
CWE-552
redhat
www.cve.org
3
ansible-tower
privilege escalation
data confidentiality
EPSS
0
Percentile
12.6%
A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CNA Affected
[
{
"product": "ansible-tower",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "ansible-tower 3.8.2, ansible-tower 3.7.5, ansible-tower 3.6.7"
}
]
}
]Related
cve
cve
CVE-2021-20253
2021-03-09 18:15:15
nvd
nvd
CVE-2021-20253
2021-03-09 18:15:15
redhatcve
redhatcve
CVE-2021-20253
2021-03-08 21:33:32
prion
prion
Design/Logic Flaw
2021-03-09 18:15:00
redhat
redhat