Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-3828
4.2
MEDIUMCVSS v3
Published
March 27, 2019
CVSS v2
3.3 LOW
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.
ansible/ansible
GitHubAnsible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.
GitHubAnsible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.>= 2.6.0, < 2.6.14, >= 2.7.0, < 2.7.8, >= 2.5.0, < 2.5.15, < 2.5.15, >= 2.6.0a1, < 2.6.14, >= 2.7.0a1, < 2.7.8NVD
ansiblePython Package IndexRadically simple IT automation
Python Package IndexRadically simple IT automation>= 2.6.0, < 2.6.14, >= 2.7.0, < 2.7.8, >= 2.5.0, < 2.5.15, < 2.5.15, >= 2.6.0a1, < 2.6.14, >= 2.7.0a1, < 2.7.8OSV