CVE-2022-2568
Fixed in a distro release EPSS <1%
A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions to modify the account settings of the superuser account and also remove the superuser privileges.
Products: redhat ansible_automation_platform
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat ansible automation platform 2.1 | python-galaxy-ng | 0:4.4.4-1.el8pc |
| Red Hat ansible automation platform 2.1 | python38-galaxy-ng | 0:4.4.4-1.el8pc |
| Red Hat ansible automation platform 2.2 | python-galaxy-ng | 0:4.5.0-4.el9ap |
| Red Hat ansible automation platform 2.2 | python3-galaxy-ng | 0:4.5.0-4.el9ap |
| Red Hat ansible automation platform 2.2 | python39-galaxy-ng | 0:4.5.0-4.el8ap |
| Red Hat ansible automation platform 2.2 | python3x-galaxy-ng | 0:4.5.0-4.el8ap |
| Ubuntu 22.04 LTS | ansible-core | no fix |
| Ubuntu 24.04 LTS | ansible | no fix |
| Ubuntu 24.04 LTS | ansible-core | no fix |
| Ubuntu 25.10 | ansible | no fix |
| Ubuntu 25.10 | ansible-core | no fix |
| Ubuntu 26.04 LTS | ansible | no fix |
| Ubuntu 26.04 LTS | ansible-core | no fix |
| Ubuntu 26.10 | ansible | no fix |
| Ubuntu 26.10 | ansible-core | no fix |
| Ubuntu Pro 14.04 LTS | ansible | no fix |
| Ubuntu Pro 16.04 LTS | ansible | no fix |
| Ubuntu Pro 18.04 LTS | ansible | no fix |
| Ubuntu Pro 20.04 LTS | ansible | no fix |
| Ubuntu Pro 22.04 LTS | ansible | no fix |