Redhat Ansible Automation Platform Early Access vulnerabilities

2 vulnerabilities

Known vulnerabilities in Redhat Ansible Automation Platform Early Access, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2021-4112redhatansible_automation_platform+5
EPSS score
0.25%
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.5.5CVE-2021-3620debianansible+17
EPSS score
0.39%
A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.