CVE-2020-1734
03.03.2020, 22:15
A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitrary commands by overwriting the ansible facts.
| Vendor | Product | Version |
|---|---|---|
| redhat | ansible_engine | 𝑥 ≤ 2.7.16 |
| redhat | ansible_engine | 2.8.8 |
| redhat | ansible_engine | 2.9.5 |
| redhat | ansible_tower | 𝑥 ≤ 3.3.4 |
| redhat | ansible_tower | 3.4.5 |
| redhat | ansible_tower | 3.5.5 |
| redhat | ansible_tower | 3.6.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases