CVE-2019-3828
27.03.2019, 13:29
Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.
| Vendor | Product | Version |
|---|---|---|
| redhat | ansible | 2.5.0 ≤ 𝑥 < 2.5.15 |
| redhat | ansible | 2.6.0 ≤ 𝑥 < 2.6.14 |
| redhat | ansible | 2.7.0 ≤ 𝑥 < 2.7.8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References