7.8
Élevée
CVE-2018-10874 In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command…
Description
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ansible | Versions non publiées |
Autres CVE de ansible
Les 7 CVE de ansible →
CVE-2019-14856
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None
6.4
Moyenne
CVE-2018-16837
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen
7.8
Élevée
CVE-2017-7481
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe
5.3
Moyenne
CVE-2018-10875
A flaw was found in ansible
7.8
Élevée