← Vulnerability feed

Vulnerability record · CVE-2021-4112 · published 25 August 2022

CVE-2021-4112: Redhat ansible automation platform early access vulnerability

Redhat · Ansible Automation Platform Early Access

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

8.8 CVSS 3.1 High EPSS 0.25% · top 85.8% CWE-552 · CWE-552
8.8CVSS 3.1 base score
0.25%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://access.redhat.com/security/cve/CVE-2021-4112 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2028121 Issue TrackingVendor Advisory
https://access.redhat.com/security/cve/CVE-2021-4112 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2028121 Issue TrackingVendor Advisory

Track CVE-2021-4112 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2023-44487HTTP/2 Rapid Reset stream cancellation denial of serviceThe HTTP/2 protocol permits a client to cancel many streams quickly, and the server's handling of those resets consumes disproportionate resources. T…KEVEPSS 100%analysed6.5CVE-2026-48710Starlette Host header validation flaw enables request.url path mismatchStarlette before 1.0.1 did not validate the HTTP Host header before using it to rebuild request.url, so a malformed Host value could make request.url…KEVEPSS 7.1%analysed9.8CVE-2018-16879Redhat ansible tower missing encryption vulnerabilityAnsible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging cel…EPSS 1.1%9.8CVE-2018-17456Git recursive clone argument injection enables remote code executionGit versions before the fixed releases mishandle a .gitmodules URL field that begins with a '-' character during recursive 'git clone' of a superproj…EPSS 97%analysed9.8CVE-2015-9262Debian linux memory buffer overflow vulnerability_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a…EPSS 5.7%9.8CVE-2018-12910Gnome libsoup out-of-bounds read vulnerabilityThe get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.EPSS 4.2%8.8CVE-2018-1000805Paramiko incorrect authorization vulnerabilityParamiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in…EPSS 4.4%8.8CVE-2018-10884Redhat ansible tower cross-site request forgery vulnerabilityAnsible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF) in awx/api/authentication.py. An attacker could expl…EPSS 0.90%

Source: NIST National Vulnerability Database (record CVE-2021-4112), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.