PYSEC-2016-1: High severity Ansible Ansible vulnerability
Published Jun 3, 2016
·Updated
The createscript function in the lxccontainer module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archivepath directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.
Affected Software
1 affected component
Ansible Ansible<1.9.6-1, >=2.0<2.0.2.0
Event History
Jun 3, 2016
CVE Published
via OSV·02:59 PM
Data Sourced
via OSV·02:59 PM
DescriptionSeverity