Lucene search
PRIOn knowledge basePRION:CVE-2021-4041HistoryAug 24, 2022 - 4:15 p.m.
Command injection
2022-08-2416:15:00
PRIOn knowledge base
www.prio-n.com
4
A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansible_runner.interface.run_command, can lead to parameters getting executed as host’s shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual environment.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ansible_runner | lt | 2.1.0 | |
| ansible_runner | eq | 2.1.0 alpha1 | |
| ansible_runner | eq | 2.1.0 alpha2 | |
| ansible_runner | eq | 2.1.0 beta1 |
Related
osv
osv
ansible-runner vulnerable to shell command injection
2022-08-25 00:00:27
CVE-2021-4041
2022-08-24 16:15:09
PYSEC-2022-253
2022-08-24 16:15:00
redhat
redhat
(RHSA-2022:0108) Moderate: ansible-runner security and bug fix update
2022-01-11 20:49:29
ibm
ibm
nvd
nvd
CVE-2021-4041
2022-08-24 16:15:09
cve
cve
CVE-2021-4041
2022-08-24 16:15:09
ubuntucve
ubuntucve
CVE-2021-4041
2022-08-24 00:00:00
nessus
nessus
RHEL 8 : ansible-runner (RHSA-2022:0108)
2024-04-28 00:00:00
cvelist
cvelist
CVE-2021-4041
2022-08-24 15:11:13
github
github
ansible-runner vulnerable to shell command injection
2022-08-25 00:00:27
redhatcve
redhatcve
CVE-2021-4041
2021-12-02 12:06:11
debiancve
debiancve
CVE-2021-4041
2022-08-24 16:15:09
veracode
veracode
Cross-site Scripting (XSS)
2022-01-14 06:00:47