Skip to content
OpenAdvisories
High · 8.0 CVE-2016-7070 EUVD-2016-7950GHSA-674g-jv56-24mf

A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a PostgreSQL database, it incorrectly configure…

Published Sep 11, 2018 · Updated Aug 6, 2024 · Assigned by redhat

Description

A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a PostgreSQL database, it incorrectly configures the trust level of postgres user. An attacker could use this vulnerability to gain admin level access to the database.

Affected products

VendorProductAffectedFixed
Red Hat Ansible Tower 3.0.3 —

References