Описание
Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ansible | fixed | 1.3.4+dfsg-1 | package |
Примечания
https://github.com/ansible/ansible/issues/857
Связанные уязвимости
CVSS3: 7.4
ubuntu
почти 8 лет назад
Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.
CVSS3: 7.4
nvd
почти 8 лет назад
Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.