Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-11079

Опубликовано: 12 нояб. 2024
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.

EPSS

Процентиль: 56%
0.00343
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.5
ubuntu
9 месяцев назад

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.

CVSS3: 5.5
redhat
9 месяцев назад

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.

CVSS3: 5.5
debian
9 месяцев назад

A flaw was found in Ansible-Core. This vulnerability allows attackers ...

CVSS3: 5.5
github
9 месяцев назад

Ansible-Core vulnerable to content protections bypass

CVSS3: 5.5
fstec
9 месяцев назад

Уязвимость системы управления конфигурациями Ansible, связанная с неправильной проверкой входных данных, позволяющая нарушителю обойти существующие ограничения безопасности

EPSS

Процентиль: 56%
0.00343
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-20