Lucene search
Veracode Vulnerability DatabaseVERACODE:22597HistoryFeb 28, 2020 - 6:58 a.m.
World Readable File
2020-02-2806:58:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
0.001 Low
EPSS
Percentile
32.1%
ansible is vulnerable to world readable file. When the function atomic_move is invoked for moving files without a mode, it leads to a file creattion with default 0666 permissions if the destination file does not exists, creating world readable files depending on the default umask as well as the permissions on the destination directory.
References
bugzilla.redhat.com/show_bug.cgi?id=1802124
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1736
github.com/ansible/ansible/issues/67794
lists.fedoraproject.org/archives/list/[email protected]/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD/
lists.fedoraproject.org/archives/list/[email protected]/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7/
security.gentoo.org/glsa/202006-11
Related
cvelist
cvelist
CVE-2020-1736
2020-03-16 15:03:52
prion
prion
Design/Logic Flaw
2020-03-16 16:15:00
osv
osv
Incorrect Permission Assignment for Critical Resource in Ansible
2022-02-09 21:59:46
PYSEC-2020-8
2020-03-16 16:15:00
CVE-2020-1736
2020-03-16 16:15:13
github
github
Incorrect Permission Assignment for Critical Resource in Ansible
2022-02-09 21:59:46
cve
cve
CVE-2020-1736
2020-03-16 16:15:13
ubuntucve
ubuntucve
CVE-2020-1736
2020-03-16 00:00:00
redhatcve
redhatcve
CVE-2020-1736
2020-02-18 14:30:08
nvd
nvd
CVE-2020-1736
2020-03-16 16:15:13
debiancve
debiancve
CVE-2020-1736
2020-03-16 16:15:13
openvas
openvas
Fedora: Security Advisory for ansible (FEDORA-2020-1e6eeadbb4)
2020-08-20 00:00:00
Fedora: Security Advisory for ansible (FEDORA-2020-d5e74bf9a0)
2020-09-09 00:00:00
nessus
nessus
Fedora 32 : ansible (2020-d5e74bf9a0)
2020-09-09 00:00:00
Fedora 31 : ansible (2020-1e6eeadbb4)
2020-08-20 00:00:00
Amazon Linux 2 : ansible (ALASANSIBLE2-2023-006)
2023-09-27 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: ansible-2.9.12-1.fc31
2020-08-20 01:05:14
[SECURITY] Fedora 32 Update: ansible-2.9.13-1.fc32
2020-09-08 15:27:25
redhat
redhat
(RHSA-2020:3600) Important: Ansible security and bug fix update (2.8.15)
2020-09-01 19:10:09
gentoo
gentoo
Ansible: Multiple vulnerabilities
2020-06-13 00:00:00
suse
suse
Security update for ansible (important)
2022-03-16 00:00:00
