CVE-2020-10691: Path Traversal
An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file within the system.
Other sources
An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file within the system.
— MITRE
ansible-galaxy collection install has a archive traversal vulnerability when extracing a collection .tar.gz file, neither install() nor the called extracttarfile() does any sanitizing on the filename. This should allow a specially crafted collection .tar.gz file to place a file wherever it wants in the file system.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-10691?
CVE-2020-10691 is a vulnerability in all ansible-engine versions 2.9.x prior to 2.9.7 when running `ansible-galaxy collection` install.
How does CVE-2020-10691 work?
CVE-2020-10691 allows an attacker to overwrite any file within the system by exploiting an archive traversal flaw in the directory creation process during the extraction of a collection .tar.gz file.
What is the severity of CVE-2020-10691?
CVE-2020-10691 has a severity score of 5.2, which is considered medium.
Which versions of ansible-engine are affected by CVE-2020-10691?
All ansible-engine versions 2.9.x prior to 2.9.7 are affected by CVE-2020-10691.
How can I fix CVE-2020-10691?
To fix CVE-2020-10691, upgrade to ansible-engine version 2.9.7 or later.