Lucene search
HistoryAug 25, 2022 - 8:15 p.m.
CVE-2021-4112
8.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
12.7%
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.
Affected configurations
Node
redhatansible_automation_platform_early_accessMatch2.0
ORredhatansible_automation_platform_text-only_advisoriesMatch-
ORredhatansible_towerMatch3.0
Node
redhatenterprise_linuxMatch8.0
redhatansible_automation_platformMatch2.0
ORredhatansible_automation_platformMatch2.1
Related
redhatcve
redhatcve
CVE-2021-4112
2021-12-14 16:27:22
cvelist
cvelist
CVE-2021-4112
2022-08-25 19:35:45
redhat
redhat
prion
prion
Default configuration
2022-08-25 20:15:00
cve
cve
CVE-2021-4112
2022-08-25 20:15:09
veracode
veracode
Privilege Escalation
2022-06-02 20:59:21
nessus
nessus
8.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
12.7%
Related for NVD:CVE-2021-4112