PT-2020-16143

CVE-2020-25636

·

تاريخ النشر

2020-10-05

·

تاريخ التحديث

2020-10-09

الوصف من

CVSS 3.1
6.6
متوسطة
المقاييسAV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Ansible Base (affected versions not specified)
Description A flaw was found in Ansible Base when using the aws ssm connection plugin, as there is no namespace separation for file transfers. Files are written directly to the root bucket, making it possible to have collisions when running multiple Ansible processes. This issue affects mainly the service availability.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
PYSEC-2020-221
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾