Описание
The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 1.6.5+dfsg-1 |
| bionic | not-affected | 1.6.5+dfsg-1 |
| cosmic | not-affected | 1.6.5+dfsg-1 |
| devel | not-affected | 1.6.5+dfsg-1 |
| disco | not-affected | 1.6.5+dfsg-1 |
| esm-apps-legacy/xenial | not-affected | 1.6.5+dfsg-1 |
| esm-apps/bionic | not-affected | 1.6.5+dfsg-1 |
| esm-apps/xenial | not-affected | 1.6.5+dfsg-1 |
| esm-infra-legacy/trusty | not-affected | 1.5.4+dfsg-1 |
| lucid | DNE |
Показывать по
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions.
The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions.
The safe_eval function in Ansible before 1.5.4 does not properly restr ...
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3