Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-1735
4.2
MEDIUMCVSS v3
Published
March 16, 2020
CVSS v2
3.6 LOW
Affected
6 projects
Assigned by
Red Hat
Severity scale
010
Description
A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
ansible/ansible
GitHubAnsible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.
GitHubAnsible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.< 2.7.17, >= 2.8.0, < 2.8.11, >= 2.9.0, < 2.9.7, >= 2.7.0a1, < 2.7.18, >= 2.8.0a1, < 2.8.12, >= 2.9.0a1, < 2.9.8, >= 2.8.0, < 2.8.9, >= 2.9.0, < 2.9.6NVD
ansiblePython Package IndexRadically simple IT automation
Python Package IndexRadically simple IT automation< 2.7.17, >= 2.8.0, < 2.8.11, >= 2.9.0, < 2.9.7, >= 2.7.0a1, < 2.7.18, >= 2.8.0a1, < 2.8.12, >= 2.9.0a1, < 2.9.8, >= 2.8.0, < 2.8.9, >= 2.9.0, < 2.9.6OSV
Crates.io
Docker Hub
NPM
RubyGems