Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2q78-vv73-5vr2

Опубликовано: 26 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

EPSS

Процентиль: 26%
0.0009
Низкий

8.8 High

CVSS3

Дефекты

CWE-552

Связанные уязвимости

CVSS3: 8.8
redhat
около 4 лет назад

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

CVSS3: 8.8
nvd
больше 3 лет назад

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

EPSS

Процентиль: 26%
0.0009
Низкий

8.8 High

CVSS3

Дефекты

CWE-552