Описание
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 2.5.1+dfsg-1 |
| devel | not-affected | 2.6.1+dfsg-1 |
| esm-apps-legacy/xenial | released | 2.0.0.2-2ubuntu1.1 |
| esm-apps/bionic | not-affected | 2.5.1+dfsg-1 |
| esm-apps/xenial | released | 2.0.0.2-2ubuntu1.1 |
| esm-infra-legacy/trusty | not-affected | code not present |
| precise | DNE | |
| precise/esm | DNE | |
| trusty | not-affected | code not present |
Показывать по
Ссылки на источники
EPSS
9.3 Critical
CVSS2
8.1 High
CVSS3
Связанные уязвимости
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper inpu ...
Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems
ALT-PU-2017-1386: package `ansible` update to version 2.2.2.0-alt1
EPSS
9.3 Critical
CVSS2
8.1 High
CVSS3