4.2
Moyenne
CVE-2019-3828 Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and…
Description
Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.
Produits et versions touchés
Références
- github.com github.com
- bugzilla.redhat.com bugzilla.redhat.com
- openSUSE-SU-2019:1125 lists.opensuse.org
- openSUSE-SU-2019:1635 lists.opensuse.org
- USN-4072-1 usn.ubuntu.com
- openSUSE-SU-2019:1858 lists.opensuse.org
- RHSA-2019:3744 access.redhat.com
- RHSA-2019:3789 access.redhat.com
- packetstormsecurity.com packetstormsecurity.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Ansible
Les 29 CVE de Ansible →
CVE-2020-14332
A flaw was found in the Ansible Engine when using module_args
5.5
Moyenne
CVE-2020-14330
An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data…
5.0
Moyenne
CVE-2020-10744
An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running…
5.0
Moyenne
CVE-2020-1746
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and…
5.0
Moyenne