MAL-015

MAL-015: Ansible Tower における Isolation Escape 2 特定の Rhel 7/8 環境にインストールされた Ansible Tower は、「Job Isolation」エスケープに対して脆弱である可能性があり、攻撃者が隔離環境の外部から「awx」ユーザーへ権限昇格できる可能性があります。 以下のファイル/セットアップは、CVE-2021-20253 がパッチ適用された後、攻撃者が Job Isolation エスケープの脆弱性を実行するために悪用できるものです: ファイル「/var/spool/mail/awx」: ターゲットに SMTP...

CVE-2026-45102: Protection Mechanism Failure

OneUptime is an open-source monitoring and observability platform. Prior to 10.0.98, OneUptime uses the Node.js' vm module as an isolation primitive. This API was not designed for that and can be escaped via error objects and infinite recursion. This vulnerability is fixed in 10.0.98...

The vulnerability of Google Chrome’s Skia graphics library allows a hacker to escape from the isolated software environment.

The vulnerability of Google Chrome’s Skia graphics library is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows a malicious actor to escape from a isolated software environment using a specially created HTML page...

The vulnerability of the xdg-desktop-portal interface of the application and Flatpak environments allows a attacker to exit from the isolated software environment and gain access to files on the host system.

The vulnerability of the xdg-desktop-portal interface of the application and Flatpak environments is related to the implementation or modification of arguments. Exploiting this vulnerability can allow an attacker to exit from a isolated software environment and gain access to files on the host...

The vulnerability of the App Sandbox access control technology in the macOS operating system allows a intruder to exit the isolated software environment and expose the protected information.

The vulnerability of the App Sandbox access control technology in the macOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a hacker to escape from the isolated software environment and disclose the protected information...

Exploit for Files or Directories Accessible to External Parties in Redhat Ansible_Tower

CVE-2021-20253: Privilege Escalation via Job Isolation Escape...

The vulnerability of the configuration utilities for BIG-IP software products, such as BIG-IP Access Policy Manager, as well as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, and BIG-IP Orchestrator, allows a perpetrator to escape from an isolated software environment or execute arbitrary code.

The vulnerability of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link...

The vulnerability of the Command Line Interface (CLI) of the Cisco Identity Services Engine (ISE) management platform allows a hacker to escape from the isolated software environment and elevate their privileges to the root level.

The vulnerability of the Command Line Interface CLI of the Cisco Identity Services Engine ISE management platform relates to deficiencies in the name checking of paths to restricted directories. Exploiting this vulnerability could allow an attacker to exit from a isolated software environment and...

The vulnerability of the Error.prepareStackTrace object in the vm2 package manager NPM allows a attacker to exit from a isolated programming environment and execute arbitrary code.

The vulnerability of the Error.prepareStackTrace object in the vm2 package manager’s library is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to exit from a isolated programming environment and execute arbitrary code...

CVE-2021-4112

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

CVE-2021-4112

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

CVE-2021-4112

CVE-2021-4112 affects Red Hat Ansible Automation Platform (ansible-runner). The issue is described as a privilege escalation via job isolation escape that could elevate a low-privilege user to an AWX user from outside the isolated environment. Public details in connected documents identify the vu...

CVE-2021-4112

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

PT-2022-11367 · Unknown · Ansible Tower

Name of the Vulnerable Software and Affected Versions: ansible-tower affected versions not specified Description: A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged use...

Privilege Escalation

ansible-runner is vulnerable to privilege escalation. A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

Important: Red Hat Security Advisory: Red Hat Ansible Ansible Tower 3.8 security update

An update is now available for Red Hat Ansible Tower 3.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links ...

ansible-tower: Privilege escalation via job isolation escape

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

ansible-tower: Privilege escalation via job isolation escape

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...

Red Hat Ansible 权限许可和访问控制问题漏洞

Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to publish, manage, and organize computer systems. A privilege permission and access control issue vulnerability exists in Red Hat Ansible Tower, which stems from an error in the...

The vulnerability of the Google Chrome web browser component, which allows a hacker to escape from an isolated software environment

The vulnerability of the Google Chrome web browser and the Android operating system relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to escape from an isolated software environment...