Total vulnerabilities in the database
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.
| Software | From | Fixed in |
|---|---|---|
| redhat / ansible_tower | 3.0 | 3.0.x |
| redhat / ansible_automation_platform_early_access | 2.0 | 2.0.x |
| redhat / ansible_automation_platform | 2.0 | 2.0.x |
| redhat / ansible_automation_platform | 2.1 | 2.1.x |