Skip to content
Fencer Vulns
high 7.2

CVE-2018-1101 json

Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalat…

published 2018-05-02 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-11749

cvss
7.2
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.9%
EPSS 1.9% chance of exploitation in 30 days, percentile 80%
public exploits
0
none known

Summary

Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrators access to the entire system.

Patch / fix

  • redhat ansible_tower 3.2.4
  • cfme cloudforms managementengine 5.8 5.8.4.5-1.el7cf
  • ansible cloudforms managementengine 5.9, cloudforms managementengine 5.8 2.4.4.0-1.el7ae
  • cfme-gemset cloudforms managementengine 5.8 5.8.4.5-1.el7cf
  • cfme-appliance cloudforms managementengine 5.8 5.8.4.5-1.el7cf
  • python-paramiko cloudforms managementengine 5.9, cloudforms managementengine 5.8 2.1.1-4.el7
  • ansible-tower-setup cloudforms managementengine 5.8 3.1.7-1.el7at
  • ansible-tower-server cloudforms managementengine 5.8 3.1.7-1.el7at
  • rh-ruby23-rubygem-json cloudforms managementengine 5.8 2.1.0-1.el7cf

red hat advisories RHSA-2018:1972RHSA-2018:1328

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2018-1101 updated cvss 8.0

ansible-tower: Privilege escalation flaw allows for organization admins to obtain system privileges

  • Red Hat CloudForms Management Engine 5.8 cfme 5.8.4.5-1.el7cf, ansible 2.4.4.0-1.el7ae, cfme-gemset 5.8.4.5-1.el7cf, python-paramiko 2.1.1-4.el7, cfme-appliance 5.8.4.5-1.el7cf, ansible-tower-setup 3.1.7-1.el7at, +2 more
    fixed: vendor fix RHSA-2018:1972
  • Red Hat CloudForms Management Engine 5.9 cfme 5.9.2.4-1.el7cf, ansible 2.4.4.0-1.el7ae, ansible-tower 3.2.4-1.el7at, cfme-gemset 5.9.2.4-1.el7cf, python-paramiko 2.1.1-4.el7, postgresql96 9.6.6-1PGDG.el7, +20 more
    fixed: vendor fix RHSA-2018:1328

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.94% chance of exploitation in the next 30 days, higher than 80% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected products

  • Red Hat, Inc. Ansible Tower

Classification

Weakness
  • CWE-266 Incorrect Privilege Assignment
  • CWE-521 Weak Password Requirements

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.