CVE-2022-2568: Medium severity redhat ansible automation platform vulnerability
A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions to modify the account settings of the superuser account and also remove the superuser privileges.
Other sources
User with 'change user' permissions can change any parameter from a superuser via API but none via UI. This user can even set the 'issuperuser' flag to false and thus remove superuser privileges.
HTTP request: PATCH http://localhost:5001/api/automation-hub/ui/v1/users/1/ {"username": "admin", "issuperuser": false}
200 OK
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2568?
CVE-2022-2568 has a medium severity level due to its privilege escalation risk in the Ansible Automation Platform.
How do I fix CVE-2022-2568?
To fix CVE-2022-2568, upgrade the Ansible Automation Platform to the latest version that addresses this vulnerability.
Who is affected by CVE-2022-2568?
CVE-2022-2568 affects users with 'change user' permissions in Ansible Automation Platform versions 2.0, 2.1, and 2.2.
What impact does CVE-2022-2568 have on security?
CVE-2022-2568 allows a malicious user to modify superuser account settings and remove superuser privileges.
Is a patch available for CVE-2022-2568?
Yes, a patch is available as part of the updates for the vulnerable versions of the Ansible Automation Platform.