Логотип exploitDog
bind:CVE-2021-3583
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-3583

Количество 8

Количество 8

ubuntu логотип

CVE-2021-3583

больше 4 лет назад

A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.

CVSS3: 7.1
EPSS: Низкий
redhat логотип

CVE-2021-3583

больше 4 лет назад

A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.

CVSS3: 6.6
EPSS: Низкий
nvd логотип

CVE-2021-3583

больше 4 лет назад

A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.

CVSS3: 7.1
EPSS: Низкий
msrc логотип

CVE-2021-3583

больше 4 лет назад

A flaw was found in Ansible where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.

CVSS3: 7.1
EPSS: Низкий
debian логотип

CVE-2021-3583

больше 4 лет назад

A flaw was found in Ansible, where a user's controller is vulnerable t ...

CVSS3: 7.1
EPSS: Низкий
github логотип

GHSA-2pfh-q76x-gwvm

больше 4 лет назад

Improper Input Validation and Command Injection in Ansible

CVSS3: 7.1
EPSS: Низкий
fstec логотип

BDU:2023-00285

больше 4 лет назад

Уязвимость программного пакета Ansible, связанная с непринятием мер по очистке входных данных, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность

CVSS3: 7.1
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:3178-1

больше 3 лет назад

Important security update for SUSE Manager Client Tools

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-3583

A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
redhat логотип
CVE-2021-3583

A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.

CVSS3: 6.6
0%
Низкий
больше 4 лет назад
nvd логотип
CVE-2021-3583

A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
msrc логотип
CVE-2021-3583

A flaw was found in Ansible where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-3583

A flaw was found in Ansible, where a user's controller is vulnerable t ...

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
github логотип
GHSA-2pfh-q76x-gwvm

Improper Input Validation and Command Injection in Ansible

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
fstec логотип
BDU:2023-00285

Уязвимость программного пакета Ansible, связанная с непринятием мер по очистке входных данных, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2022:3178-1

Important security update for SUSE Manager Client Tools

больше 3 лет назад

Уязвимостей на страницу