Описание
runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in /tmp/.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.5.4+dfsg-1 |
| esm-infra-legacy/trusty | not-affected | 1.5.4+dfsg-1 |
| lucid | DNE | |
| precise | DNE | |
| quantal | DNE | |
| raring | DNE | |
| saucy | ignored | end of life |
| trusty | not-affected | 1.5.4+dfsg-1 |
| trusty/esm | not-affected | 1.5.4+dfsg-1 |
| upstream | released | 1.2.3 |
Показывать по
10
EPSS
Процентиль: 16%
0.00051
Низкий
1.9 Low
CVSS2
Связанные уязвимости
nvd
больше 12 лет назад
runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in /tmp/.
debian
больше 12 лет назад
runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using C ...
CVSS3: 4
github
больше 3 лет назад
Ansible uses a socket with predictable filename in /tmp
EPSS
Процентиль: 16%
0.00051
Низкий
1.9 Low
CVSS2