Описание
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
Ссылки
- Release Notes
- Third Party AdvisoryVDB Entry
- Release Notes
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
EPSS
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
Связанные уязвимости
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
The vault subsystem in Ansible before 1.5.5 does not set the umask bef ...
ALT-PU-2014-1523: package `ansible` update to version 1.5.5-alt1
EPSS
5.5 Medium
CVSS3
2.1 Low
CVSS2