8.0
Élevée
CVE-2017-7466 Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems
Description
Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ansible | Versions non publiées |
Références
- RHSA-2017:1599 access.redhat.com
- RHSA-2017:1334 access.redhat.com
- 97595 www.securityfocus.com
- RHSA-2017:1685 access.redhat.com
- RHSA-2017:1244 access.redhat.com
- RHSA-2017:1499 access.redhat.com
- bugzilla.redhat.com bugzilla.redhat.com
- RHSA-2017:1476 access.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de ansible
Les 7 CVE de ansible →
CVE-2019-14856
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None
6.4
Moyenne
CVE-2018-16837
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen
7.8
Élevée
CVE-2017-7481
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe
5.3
Moyenne
CVE-2018-10875
A flaw was found in ansible
7.8
Élevée