Описание
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 1.6.5+dfsg-1 |
| bionic | not-affected | 1.6.5+dfsg-1 |
| cosmic | not-affected | 1.6.5+dfsg-1 |
| devel | not-affected | 1.6.5+dfsg-1 |
| disco | not-affected | 1.6.5+dfsg-1 |
| eoan | not-affected | 1.6.5+dfsg-1 |
| esm-apps/bionic | not-affected | 1.6.5+dfsg-1 |
| esm-apps/focal | not-affected | 1.6.5+dfsg-1 |
| esm-apps/jammy | not-affected | 1.6.5+dfsg-1 |
| esm-apps/xenial | not-affected | 1.6.5+dfsg-1 |
Показывать по
2.1 Low
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
The vault subsystem in Ansible before 1.5.5 does not set the umask bef ...
2.1 Low
CVSS2
5.5 Medium
CVSS3