Lucene search
Veracode Vulnerability DatabaseVERACODE:4222HistoryMay 11, 2017 - 5:59 a.m.
Arbitrary Code Execution
2017-05-1105:59:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.014 Low
EPSS
Percentile
86.3%
ansible is vulnerable to arbitrary code execution. The attacks are possible because it does not strip lookup calls out of inventory variables and clean unsafe data returned from lookup plugins. The code execution can be performed by interpolating file names as lookup plugin commands in combination with the pipe feature.
Related
cve
cve
CVE-2014-4966
2020-02-18 15:15:11
osv
osv
Ansible Arbitrary Code Execution
2022-05-17 19:57:30
PYSEC-2020-204
2020-02-18 15:15:00
cvelist
cvelist
CVE-2014-4966
2020-02-18 14:46:28
nessus
nessus
FreeBSD : ansible -- code execution from compromised remote host data or untrusted local data (9dae9d62-205f-11e5-a4a5-002590263bf5)
2015-07-06 00:00:00
Fedora 19 : ansible-1.6.10-1.fc19 (2014-8904)
2014-08-08 00:00:00
Fedora 20 : ansible-1.6.10-1.fc20 (2014-8901)
2014-08-08 00:00:00
prion
prion
Code injection
2020-02-18 15:15:00
debiancve
debiancve
CVE-2014-4966
2020-02-18 15:15:11
nvd
nvd
CVE-2014-4966
2020-02-18 15:15:11
github
github
Ansible Arbitrary Code Execution
2022-05-17 19:57:30
freebsd
freebsd
ubuntucve
ubuntucve
CVE-2014-4966
2020-02-18 00:00:00
openvas
openvas
Fedora Update for ansible FEDORA-2014-8901
2014-08-08 00:00:00
Mageia: Security Advisory (MGASA-2014-0350)
2022-01-28 00:00:00
Gentoo Security Advisory GLSA 201411-09
2015-09-29 00:00:00
securityvulns
securityvulns
Ansible security vulnerabilities
2014-10-16 00:00:00
[oCERT-2014-004] Ansible input sanitization errors
2014-10-16 00:00:00
[oCERT-2014-004] Ansible input sanitization errors
2014-10-16 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: ansible-1.6.10-1.fc20
2014-08-07 15:36:14
[SECURITY] Fedora 19 Update: ansible-1.6.10-1.fc19
2014-08-07 15:26:52
mageia
mageia
Updated ansible package fixes multiple security issues
2014-08-25 12:44:11
gentoo
gentoo
Ansible: Privilege escalation
2014-11-23 00:00:00