Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD72FCCFDF-2061-11E5-A4A5-002590263BF5
HistoryJun 25, 2015 - 12:00 a.m.

ansible -- multiple vulnerabilities

2015-06-2500:00:00
vuxml.freebsd.org
11

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

48.6%

JSON

Ansible, Inc. reports:

Ensure that hostnames match certificate names when using HTTPS -
resolved in Ansible 1.9.2
Improper symlink handling in zone, jail, and chroot connection
plugins could lead to escape from confined environment - resolved
in Ansible 1.9.2

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchansible< 1.9.2UNKNOWN

Related

nessus 6
openvas 4
osv 5
debian 1
ubuntucve 2
prion 2
mageia 1
github 2
veracode 1
debiancve 2
cve 2
nvd 2
cvelist 2
fedora 2
nessus
nessus
FreeBSD : ansible -- multiple vulnerabilities (72fccfdf-2061-11e5-a4a5-002590263bf5)
2015-07-06 00:00:00
Debian DLA-1923-1 : ansible security update
2019-09-17 00:00:00
Fedora 22 : ansible-1.9.2-1.fc22 (2015-10797)
2015-07-06 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1923-1)
2019-09-17 00:00:00
Fedora Update for ansible FEDORA-2015-10797
2015-07-07 00:00:00
Fedora Update for ansible FEDORA-2015-10807
2015-10-30 00:00:00
osv
osv
ansible - security update
2019-09-16 00:00:00
PYSEC-2017-3
2017-06-07 20:29:00
Ansible Sandbox Escape via Symlink Attack
2022-05-13 01:54:10
debian
debian
[SECURITY] [DLA 1923-1] ansible security update
2019-09-16 12:23:29
ubuntucve
ubuntucve
CVE-2015-6240
2017-06-07 00:00:00
CVE-2015-3908
2015-08-12 00:00:00
prion
prion
Code injection
2017-06-07 20:29:00
Code injection
2015-08-12 14:59:00
mageia
mageia
Updated ansible package fixes security vulnerability
2015-07-29 00:01:59
github
github
Ansible does not verify that the server hostname matches a domain name in certificates
2018-10-10 17:23:51
Ansible Sandbox Escape via Symlink Attack
2022-05-13 01:54:10
veracode
veracode
Man-in-the-Middle (MitM)
2017-04-05 02:01:13
debiancve
debiancve
CVE-2015-3908
2015-08-12 14:59:21
CVE-2015-6240
2017-06-07 20:29:00
cve
cve
CVE-2015-6240
2017-06-07 20:29:00
CVE-2015-3908
2015-08-12 14:59:21
nvd
nvd
CVE-2015-6240
2017-06-07 20:29:00
CVE-2015-3908
2015-08-12 14:59:21
cvelist
cvelist
CVE-2015-6240
2017-06-07 20:00:00
CVE-2015-3908
2015-08-12 14:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: ansible-1.9.2-1.fc21
2015-07-05 18:56:55
[SECURITY] Fedora 22 Update: ansible-1.9.2-1.fc22
2015-07-05 18:56:03

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

48.6%

JSON
Related for 72FCCFDF-2061-11E5-A4A5-002590263BF5
nessus6openvas4osv5debian1ubuntucve2prion2mageia1github2veracode1debiancve2cve2nvd2cvelist2fedora2