Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:12970
HistoryJan 15, 2019 - 9:24 a.m.

Arbitrary Code Execution

2019-01-1509:24:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14

EPSS

0.001

Percentile

32.4%

ansible is vulnerable to arbitrary code execution. The application loads certain host/group variables from the current working directory when ad-hoc command line commands are run and a playbook or playbook base directory is not specified. This can allow a malicious user to inject and execute arbitrary code.