Описание
lib/ansible/playbook/init.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.5.4+dfsg-1 |
| esm-infra-legacy/trusty | not-affected | 1.5.4+dfsg-1 |
| lucid | DNE | |
| precise | DNE | |
| quantal | DNE | |
| raring | DNE | |
| saucy | ignored | end of life |
| trusty | not-affected | 1.5.4+dfsg-1 |
| trusty/esm | not-affected | 1.5.4+dfsg-1 |
| upstream | released | 1.2.3 |
Показывать по
10
EPSS
Процентиль: 24%
0.00082
Низкий
3.3 Low
CVSS2
Связанные уязвимости
nvd
больше 12 лет назад
lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.
debian
больше 12 лет назад
lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when p ...
EPSS
Процентиль: 24%
0.00082
Низкий
3.3 Low
CVSS2