CVE-2015-1481: Medium severity red hat ansible tower vulnerability
Published Feb 4, 2015
·Updated
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a superuser account.
Affected Software
1 affected component
Ansible Tower<=2.0.4
Event History
Feb 4, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1481?
CVE-2015-1481 is rated as a critical vulnerability due to its potential to allow unauthorized privilege escalation.
2
How do I fix CVE-2015-1481?
To fix CVE-2015-1481, upgrade Ansible Tower to version 2.0.5 or later to mitigate the privilege escalation issue.
3
Who is affected by CVE-2015-1481?
Organizations using Ansible Tower versions prior to 2.0.5 are affected by CVE-2015-1481.
4
What type of attack does CVE-2015-1481 enable?
CVE-2015-1481 enables remote organization administrators to create a superuser account, resulting in unauthorized access.
5
Is there a workaround for CVE-2015-1481?
There is no documented workaround for CVE-2015-1481; the only resolution is to update to the fixed version.