CVE-2014-3498

Опубликовано: 08 июн. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=1335551
Issue Tracking
Third Party Advisory
https://github.com/ansible/ansible/commit/8ed6350e65c82292a631f08845dfaacffe7f07f5
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1335551
Issue Tracking
Third Party Advisory
https://github.com/ansible/ansible/commit/8ed6350e65c82292a631f08845dfaacffe7f07f5
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*

Версия до 1.6.5 (включая)

EPSS

Процентиль: 83%

0.02521

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2014-3498

CVSS3: 8.8

ubuntu

около 9 лет назад

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.

CVE-2014-3498

redhat

около 12 лет назад

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.

CVE-2014-3498

CVSS3: 8.8

debian

около 9 лет назад

The user module in ansible before 1.6.6 allows remote authenticated us ...

GHSA-4cvm-5776-jx9f

CVSS3: 8.8

github

около 4 лет назад

Ansible Arbitrary Code Execution

EPSS

Процентиль: 83%

0.02521

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-20