CVE-2018-1101

Description

Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrators access to the entire system.

Risk Information

Base Score

7.2

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.432

Associated Vulnerability

Vulnerability	OS Platform
(RHSA-2018:0591) Critical: python-paramiko security and bug fix update python-paramiko-2.1.1-4.el7.noarch.rpm	Linux
(RHSA-2018:0591) Critical: python-paramiko security and bug fix update python-paramiko-doc-2.1.1-4.el7.noarch.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234