CVE-2021-4112
Assigner: redhat
Published: 2022-08-25T19:35:45
State: PUBLISHED
affected: product: ansible-tower
vendor: n/a
versions: status: affected
version: Fixed in ansible-tower 3.8.5
descriptions: value: A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.
problemTypes: descriptions: cweId: CWE-552
description: CWE-552 - Files or Directories Accessible to External Parties
type: CWE