CVE-2021-4112: Files or Directories Accessible to External Parties

August 25, 2022 (updated February 12, 2023)

A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.

References

access.redhat.com/security/cve/CVE-2021-4112
bugzilla.redhat.com/show_bug.cgi?id=2028121
nvd.nist.gov/vuln/detail/CVE-2021-4112

Code Behaviors & Features

Detect and mitigate CVE-2021-4112 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →