Skip to content
Fencer Intel
medium 6.5

CVE-2022-2568 json

A privilege escalation flaw was found in the Ansible Automation Platform.

published 4y ago modified 4mo ago also EUVD-2022-34821

cvss
6.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.0%
EPSS 1.0% chance of exploitation in 30 days, percentile 62%
public exploits
0
none known

Summary

A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions to modify the account settings of the superuser account and also remove the superuser privileges.

Patch / fix

  • python-galaxy-ng ansible automation platform 2.2 4.5.0-4.el9ap
  • python3-galaxy-ng ansible automation platform 2.2 4.5.0-4.el9ap
  • python39-galaxy-ng ansible automation platform 2.2 4.5.0-4.el8ap
  • python3x-galaxy-ng ansible automation platform 2.2 4.5.0-4.el8ap
  • python-galaxy-ng ansible automation platform 2.1 4.4.4-1.el8pc
  • python38-galaxy-ng ansible automation platform 2.1 4.4.4-1.el8pc

red hat advisories RHSA-2022:6079RHSA-2022:6078

Is CVE-2022-2568 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2022-2568 updated cvss 7.2

Ansible: Logic flaw leads to privilage escalation

  • Red Hat Ansible Automation Platform 2.1 for RHEL 8 python-galaxy-ng 4.4.4-1.el8pc, python38-galaxy-ng 4.4.4-1.el8pc
    fixed: vendor fix RHSA-2022:6078
  • Red Hat Ansible Automation Platform 2.2 for RHEL 8 python39-galaxy-ng 4.5.0-4.el8ap, python3x-galaxy-ng 4.5.0-4.el8ap Red Hat Ansible Automation Platform 2.2 for RHEL 9 python-galaxy-ng 4.5.0-4.el9ap, python3-galaxy-ng 4.5.0-4.el9ap
    fixed: vendor fix RHSA-2022:6079
  • Red Hat Ansible Automation Platform 1.2 automation hub Red Hat Ansible Automation Platform 2.1 for RHEL 8 ansible-core 2.12.7-2.el8ap, ansible-test 2.12.7-2.el8ap, automation-hub 4.4.4-1.el8pc, pulpcore-selinux 1.3.2-1.el8ap, automation-controller 4.1.3-2.el8ap, automation-controller-ui 4.1.3-2.el8ap, +4 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.98% chance of exploitation in the next 30 days, higher than 62% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=2108653 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

  • n/a Red Hat Ansible Automation Platform

Classification

Weakness
  • CWE-269 Improper Privilege Management

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.