A flaw was found in ansible-tower. The default installation is vulnerable to "Job Isolation" escape allowing an attacker to elevate the privilege from a low privileged user to the “awx” user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
A flaw was found in ansible-tower. The default installation is vulnerable to "Job Isolation" escape allowing an attacker to elevate the privilege from a low privileged user to the “awx” user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.