CVE-2021-4112

Description

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-33992

https://bugzilla.redhat.com/show_bug.cgi?id=2028121

https://access.redhat.com/security/cve/CVE-2021-4112

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS