CVE-2016-7070

8.0 highEPSS 0.6%

High (8.0) in redhat ansible tower. EPSS 0.6% chance of exploitation in the next 30 days.

A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a PostgreSQL database, it incorrectly configures the trust level of postgres user. An attacker could use this vulnerability to gain admin level access to the database.

Severity

CVSS 3.0

8.0 high

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-11-01)
CWEs: CWE-264, CWE-266
Published: 2018-09-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:ansible_tower

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7070
https://docs.ansible.com/ansible-tower/3.0.3/html/upgrade-migration-guide/release_notes.html
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7070
https://docs.ansible.com/ansible-tower/3.0.3/html/upgrade-migration-guide/release_notes.html

Check your stack JSON