Published: 07/06/2017 Updated: 16/09/2019

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The chroot, jail, and zone connection plugins in ansible prior to 1.9.2 allow local users to escape a restricted environment via a symlink attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat ansible

The chroot, jail, and zone connection plugins in ansible before 192 allow local users to escape a restricted environment via a symlink attack ...

Code for HPE Project on Securing Open Source Components on Containers.

Securing_Open_Source_Components_on_Containers Code for HPE Project on Securing Open Source Components on Containers Scanning of vulnerabilities on the Docker Debian Image was done using the Anchore Engine CLI To demonstrate vulnerabilities, the Chroot, Chmod and AppArmor exploitations were performed on the Ubuntu Bionic Container Finally, Docker-py and Docker-compose compone

CWE-59 https://github.com/ansible/ansible/commit/ca2f2c4ebd7b5e097eab0a710f79c1f63badf95b https://github.com/ansible/ansible/commit/952166f48eb0f5797b75b160fd156bbe1e8fc647 https://bugzilla.redhat.com/show_bug.cgi?id=1243468 http://www.openwall.com/lists/oss-security/2015/08/17/10 https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html https://nvd.nist.gov https://github.com/PRISHIta123/Securing_Open_Source_Components_on_Containers https://access.redhat.com/security/cve/cve-2015-6240

CVE-2015-6240

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect