#VU12838 Privilege escalation in Ansible Tower - CVE-2018-1101

Vulnerability identifier: #VU12838

Vulnerability risk: Low

CVSSv4.0: 6.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2018-1101

CWE-ID: CWE-264

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Ansible Tower
Web applications / Remote management & hosting panels

Vendor: Red Hat Inc.

Description
The vulnerability allows a remote authenticated attacker to write arbitrary files and gain elevated privileges on the target system.

The weakness exists in the management of system and organization administrators due to improper security restrictions. A remote attacker can reset the passwords and gain root privileges.

Mitigation
Update to version 3.2.4.

Vulnerable software versions

Ansible Tower: 3.2.0 - 3.2.3

---

External links
https://www.ansible.com/security

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.