CVE-2021-20253

CVE-2021-20253: Escalada de Privilegios mediante Escape de Aislamiento de Trabajos en Ansible Tower Se encontró una falla en ansible-tower. La instalación predeterminada es vulnerable a un escape de aislamiento de trabajos que permite a un atacante elevar sus privilegios desde un usuario con poco...

MAL-015

MAL-015: Isolation Escape 2 in Ansible Tower Le installazioni di Ansible Tower su alcune configurazioni di Rhel 7/8 sono potenzialmente vulnerabili a "Job Isolation" Escape che consentono a un attaccante di elevare i privilegi all'utente "awx" dall'esterno dell'ambiente isolato. I seguenti...

EUVD-2021-33992

Malicious code in bioql PyPI...

CVE-2021-4112

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

Default configuration

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

CVE-2021-4112

CVE-2021-4112 affects Red Hat Ansible Automation Platform (ansible-runner). The issue is described as a privilege escalation via job isolation escape that could elevate a low-privilege user to an AWX user from outside the isolated environment. Public details in connected documents identify the vu...

PT-2022-11367 · Unknown · Ansible Tower

Name of the Vulnerable Software and Affected Versions: ansible-tower affected versions not specified Description: A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged use...

Privilege Escalation

ansible-runner is vulnerable to privilege escalation. A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

ansible-tower: Privilege escalation via job isolation escape

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

ansible-tower: Privilege escalation via job isolation escape

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

Red Hat Ansible 权限许可和访问控制问题漏洞

Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to publish, manage, and organize computer systems. A privilege permission and access control issue vulnerability exists in Red Hat Ansible Tower, which stems from an error in the...

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

CVE-2021-20253

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality a...

PT-2021-13859 · Unknown · Ansible Tower

Name of the Vulnerable Software and Affected Versions: ansible-tower affected versions not specified Description: A flaw was found in the default installation of ansible-tower, allowing an attacker to elevate privileges from a low-privileged user to the awx user from outside the isolated...