Not rated
CVE-2014-4678 The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers…
Description
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ansible | Versions not published |
References
- github.com github.com
- groups.google.com groups.google.com
- security-tracker.debian.org security-tracker.debian.org
- www.openwall.com www.openwall.com
- www.openwall.com www.openwall.com
- www.rapid7.com www.rapid7.com
- www.rapid7.com www.rapid7.com
Timeline
- Published
- Last modified
Other CVEs of Ansible
The 12 CVEs of Ansible →
CVE-2021-3681
A flaw was found in Ansible Galaxy Collections
Not rated
CVE-2021-20180
A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by…
Not rated
CVE-2021-3620
A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user…
Not rated
CVE-2021-3583
A flaw was found in Ansible, where a user's controller is vulnerable to template injection
Not rated