A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the malicious user to execute arbitrary code.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
redhat ansible engine 2.0 |
||
redhat ansible engine 2.4 |
||
redhat ansible engine 2.5 |
||
redhat openstack 10 |
||
redhat openstack 13 |
||
redhat virtualization host 4.0 |
||
redhat ceph storage 2.0 |
||
redhat ceph storage 3.0 |
||
redhat openshift 3.0 |
||
redhat ansible engine 2.6 |
||
redhat openstack 12 |
||
redhat virtualization 4.0 |
||
redhat gluster storage 3.0.0 |
||
debian debian linux 9.0 |
||
suse package_hub - |
||
canonical ubuntu linux 16.04 |
||
canonical ubuntu linux 18.04 |
||
canonical ubuntu linux 19.04 |
||
debian debian linux 8.0 |