CVE-2018-1101

State: Published
Severity: Not scored
Published: May 2, 2018
Updated: Sep 17, 2024
Reserved: Dec 4, 2017

Description

Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrators access to the entire system.

Scores

The record has no CVSS score.

Weaknesses

CWE-266

Affected Products

Product	Versions
Ansible TowerRed Hat, Inc.	before 3.2.4Affected

References

https://www.ansible.com/security
https://bugzilla.redhat.com/show_bug.cgi?id=1563492
RHSA-2018:1972vendor-advisory
https://access.redhat.com/security/cve/cve-2018-1101
RHSA-2018:1328vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.