PT-2018-2340
CVE-2018-10875
·
Publicado
2018-06-29
·
Atualizado
2026-11-06
Descrição por
CVSS 4.0
8.5
AltaMétricasAV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
ansible (affected versions not specified)
Description
A flaw in ansible allows an attacker to execute arbitrary code by altering the ansible.cfg file in the current working directory to point to a plugin or module path under their control. This can be exploited remotely.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾