Non notée
CVE-2014-4678 The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers…
Description
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-4657.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ansible | Versions non publiées |
Autres CVE de Ansible
Les 12 CVE de Ansible →
CVE-2021-3681
A flaw was found in Ansible Galaxy Collections
Non notée
CVE-2021-20180
A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by…
Non notée
CVE-2021-3620
A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user…
Non notée
CVE-2021-3583
A flaw was found in Ansible, where a user's controller is vulnerable to template injection
Non notée