Remote code execution

2018-07-1913:29:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

88.8%

JSON

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as ‘unsafe’ and is not evaluated.

CPENameOperatorVersion
ubuntu_linuxeq16.04
ubuntu_linuxeq18.04
ubuntu_linuxeq19.04
debian_linuxeq9.0
ansible_enginelt2.3.1.0
ansible_enginege2.3.2.0
ansible_enginelt2.4.0.0
gluster_storageeq3.2
openshift_container_platformeq3.3
openshift_container_platformeq3.4

Name	Operator	Version
ubuntu_linux	eq	16.04
ubuntu_linux	eq	18.04
ubuntu_linux	eq	19.04
debian_linux	eq	9.0
ansible_engine	lt	2.3.1.0
ansible_engine	ge	2.3.2.0
ansible_engine	lt	2.4.0.0
gluster_storage	eq	3.2
openshift_container_platform	eq	3.3
openshift_container_platform	eq	3.4