CVE-2022-2568 is a medium-severity vulnerability that affects the Ansible Automation Platform. This privilege escalation flaw allows remote authenticated users with 'change user' permissions to modify the account settings of the superuser account and remove the superuser privileges. The vulnerability impacts certain versions of Red Hat Ansible Automation Platform running on Red Hat Enterprise Linux systems.

How do I know if I'm affected?

If you're wondering whether you're affected by the vulnerability, it's important to know that this issue impacts certain versions of Red Hat Ansible Automation Platform running on Red Hat Enterprise Linux systems. Specifically, the affected versions are 2.1 for RHEL 8, 2.2 for RHEL 8, and 2.2 for RHEL 9.

What should I do if I'm affected?

If you're affected by the vulnerability, it's crucial to update your Red Hat Ansible Automation Platform to the latest version. For RHEL 8, update to version 2.1, and for RHEL 9, update to version 2.2. This will help mitigate the privilege escalation flaw and protect your system from potential threats.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This medium-severity flaw in the Ansible Automation Platform allows remote authenticated users with specific permissions to modify superuser account settings and remove their privileges, leading to privilege escalation.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-269, which refers to a privilege escalation flaw in the Ansible Automation Platform, allowing users with 'change user' permissions to modify superuser account settings and remove their privileges. This issue is identified as CWE-269 (Improper Privilege Management).

For more details

CVE-2022-2568 is a medium-severity vulnerability affecting the Ansible Automation Platform, with potential consequences for organizations using affected software configurations. To gain a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, it is recommended to visit the NVD page or the links below.

• NVD - CVE-2022-2568

• 2108653 – (CVE-2022-2568) CVE-2022-2568 Ansible: Logic flaw leads to privilege escalation