CWE Code: 521
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Weak Password Requirements
Summary: ansible tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. system administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrators access to the entire system.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-05-02
Last Modified Date: 2019-10-09