Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-4658
5.5
MEDIUMCVSS v3
Published
February 20, 2020
CVSS v2
2.1 LOW
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
ansible/ansible
GitHubAnsible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.
GitHubAnsible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.< 1.5.5NVD
