Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-4659
5.5
MEDIUMCVSS v3
Published
February 20, 2020
CVSS v2
2.1 LOW
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format.
ansible/ansible
GitHubAnsible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.
GitHubAnsible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.< 1.5.5NVD
