Lucene search

K

GoogleOSV:GHSA-74VQ-H4Q8-X6JV

HistoryApr 15, 2019 - 4:19 p.m.

Ansible Path Traversal vulnerability

2019-04-1516:19:19

Google

osv.dev

12

0.001 Low

EPSS

Percentile

22.9%

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.

CPENameOperatorVersion
ansibleeq2.6.5
ansibleeq1.6.4
ansibleeq1.7
ansibleeq2.2.1.0
ansibleeq1.6
ansibleeq1.4
ansibleeq1.5.3
ansibleeq2.6.0
ansibleeq2.7.6
ansibleeq1.6.7

Rows per page:

1-10 of 1211

References

lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html

lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html

lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html

packetstormsecurity.com/files/172837/Ansible-Fetch-Path-Traversal.html

access.redhat.com/errata/RHSA-2019:3744

access.redhat.com/errata/RHSA-2019:3789

bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3828

github.com/advisories/GHSA-74vq-h4q8-x6jv

github.com/ansible/ansible

github.com/ansible/ansible/pull/52133

nvd.nist.gov/vuln/detail/CVE-2019-3828

usn.ubuntu.com/4072-1

0.001 Low

EPSS

Percentile

22.9%

Related for OSV:GHSA-74VQ-H4Q8-X6JV

cve1 nessus13 prion1 nvd1 github1 alpinelinux1 redhat6 veracode1 ubuntucve1 fedora4 redhatcve1 openvas8 osv3 debiancve1 cvelist1 mageia1 suse3 photon4 debian1 ubuntu1