| Package | Affected versions | Patched versions |
|---|---|---|
| ansible automation platform | = 2.0= 2.1 | |
| ansible automation platform early access | = 2.0 | |
| ansible tower | = 3.0 |
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free