CVE-2021-4112 - Redhat Ansible Tower, Redhat Ansible Automation Platform and Redhat Ansible Automation Platform Text-only Advisories
Critical 8.8
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.
Affected software
Redhat Ansible Tower
Redhat Ansible Automation Platform
Redhat Ansible Automation Platform Text-only Advisories
Redhat Ansible Automation Platform Early Access