CVE-2021-4112

Published: Aug 25, 2022Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: NVD

Description

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

Affected (5)

Products: Redhat: Ansible Automation Platform Early Access, Ansible Automation Platform Text Only Advisories, Ansible Tower, Ansible Automation Platform

Redhat

4 products

Ansible Automation Platform Early Access

Ansible Automation Platform Text Only Advisories

Ansible Tower

Ansible Automation Platform

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Ansible Automation Platform Early Access	Version 2.0
Redhat Ansible Automation Platform Text Only Advisories	All versions
Redhat Ansible Tower	Version 3.0