Code injection

2018-07-1322:29:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.7%

JSON

A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.

CPENameOperatorVersion
ubuntu_linuxeq16.04
ubuntu_linuxeq18.04
ubuntu_linuxeq19.04
debian_linuxeq9.0
debian_linuxeq8.0
ansible_engineeq2.5
ansible_engineeq2.0
ansible_engineeq2.4
ansible_engineeq2.6
ceph_storageeq3.0

Name	Operator	Version
ubuntu_linux	eq	16.04
ubuntu_linux	eq	18.04
ubuntu_linux	eq	19.04
debian_linux	eq	9.0
debian_linux	eq	8.0
ansible_engine	eq	2.5
ansible_engine	eq	2.0
ansible_engine	eq	2.4
ansible_engine	eq	2.6
ceph_storage	eq	3.0