ansible-vault vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

An exploitable vulnerability exists in the yaml loading functionality of ansible-vault prior to 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.

Ansible-vault Project Ansible-vault

4.7

CVSSv3

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file...

Redhat Cloudforms Management Engine 5.0 Redhat Ansible Tower Redhat Openstack 13 Redhat Ansible Debian Debian Linux 8.0 Debian Debian Linux 10.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32

5.2

CVSSv3

An archive traversal flaw was found in all ansible-engine versions 2.9.x before 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrit...

Redhat Ansible Engine Redhat Ansible Tower 3.0

4.6

CVSSv3

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.

Redhat Cloudforms Management Engine 5.0 Redhat Ansible Tower Redhat Openstack 13 Redhat Ansible Debian Debian Linux 10.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32

7.1

CVSSv3

A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x before 2.7.17, 2.8.9 and 2.9.6 respectively, when using ansible_facts as a subkey of itself and promoting it to a variable when inject is enabled, overwriting the ansible_facts after the clean. An attacker co...

Redhat Openstack 10 Redhat Ansible Tower Redhat Ansible Redhat Openstack 13 Debian Debian Linux 10.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32

1 Github repository

5

CVSSv3

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is cr...

Redhat Cloudforms Management Engine 5.0 Redhat Ansible Tower Redhat Ansible Redhat Openstack 13 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Debian Debian Linux 8.0 Debian Debian Linux 10.0

1 Github repository

5

CVSSv3

A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x prior to 2.7.17 and 2.8.x prior to 2.8.11 and 2.9.x prior to 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when the ldap_attr and ldap_entry community modules a...

Redhat Ansible Tower Redhat Ansible Engine Debian Debian Linux 10.0

5.5

CVSSv3

A security flaw was found in Ansible Engine, all Ansible 2.7.x versions before 2.7.17, all Ansible 2.8.x versions before 2.8.11 and all Ansible 2.9.x versions before 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed...

Redhat Ansible Tower Redhat Ansible Engine Debian Debian Linux 10.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32

5.5

CVSSv3

A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x prior to 2.7.17 and 2.8.x prior to 2.8.11 and 2.9.x prior to 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as ass...

Redhat Ansible Tower Redhat Ansible Engine Redhat Ceph Storage 3.0 Redhat Openstack 10 Redhat Ceph Storage 2.0 Redhat Storage 3.0 Redhat Openstack 13 Redhat Openstack 15 Debian Debian Linux 10.0

NA

OSEP-Notes Initial Access HTA Fileless Initial Access Reverse Shell (AppLocker + CLM + Defender Bypass) Scenario: You can make a user execute your malicious HTA files, but AppLocker, CLM, and Defender block all payloads. To get a fileless reverse shell, one method that worked for...

1 Github repository

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook