The vault subsystem in Ansible prior to 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
redhat ansible |