PYSEC-2020-205: Critical severity Ansible Ansible vulnerability
Published Feb 18, 2020
·Updated
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with (1) a trailing " src=" clause, (2) a trailing " temp=" clause, or (3) a trailing " validate=" clause accompanied by a shell command.
Affected Software
1 affected component
Ansible Ansible<1.6.7
Event History
Feb 18, 2020
CVE Published
via OSV·03:15 PM
Data Sourced
via OSV·03:15 PM
DescriptionSeverity