Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-7070

21
FAUCET Score

CVE-2016-7070 describes a privilege escalation flaw in Ansible Tower versions prior to 3.0.3, specifically affecting its PostgreSQL database deployment. The vulnerability stems from an incorrectly configured trust level for the 'postgres' user, allowing an authenticated attacker on the same network to gain administrative access to the database. With a CVSS score of 8.0 (HIGH), this flaw presents a significant risk due to its low attack complexity and potential for complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
< 3.0.3CPE matchmatch criteria
cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

8.0HIGH

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.1
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
0.64%
Probability of exploitation in next 30 days
EPSS Percentile
46.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0063 is in the 43rd percentile among its peer group of 551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (1)

redhatvendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2016-7070Moderate

Tower: PostgreSQL privilege escalation in Tower-deployed setups

Nov 2, 2016

References

bugzilla.redhat.com / show_bug.cgi
Issue TrackingVendor Advisory
docs.ansible.com / ansible-tower/3.0.3/html/upgrade-migration-guide/release_notes.html
Release NotesVendor Advisory