description: A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.
problem types: CWE-552 - Files or Directories Accessible to External Parties
affected:
{
product: ansible-tower
vendor: n/a
versions:
status: affected, version: Fixed in ansible-tower 3.8.5
}