Security Advisory

CVE-2021-20253

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-03-09 17:14:28
Last updated 2024-08-03 17:37:22
Assigner redhat
State PUBLISHED

Description

A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.