A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-20253
• https://bugzilla.redhat.com/show_bug.cgi?id=1928847