REDHAT-BUG-1977959: Medium severity Ansible ansible-runner vulnerability
A flaw was found in ansible-runner. The default temporary files configuration in ansible-2.0.0 is written to world rw location. An attacker can pre-create that directory, which may allow them to either read potentially private information or force ansible-runner to write files as the legitimate user in a place they did not expect.
Upstream issue:
https://github.com/ansible/ansible-runner/issues/738
Upstream patch:
https://github.com/ansible/ansible-runner/pull/742/commits/60b059f00409224acae1e417153a241c8591ad89
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1977959?
The severity of REDHAT-BUG-1977959 is currently classified as a medium risk due to potential information leakage and unauthorized file access.
How do I fix REDHAT-BUG-1977959?
To fix REDHAT-BUG-1977959, it is recommended to update ansible-runner to the latest version where the temporary file configurations have been secured.
What vulnerabilities does REDHAT-BUG-1977959 address?
REDHAT-BUG-1977959 addresses the misconfiguration of default temporary files that are set in a writable world-readable location.
Who is affected by REDHAT-BUG-1977959?
Users of Ansible ansible-runner version 2.0.0 and possibly earlier versions are affected by REDHAT-BUG-1977959.
Can REDHAT-BUG-1977959 allow an attacker to access sensitive data?
Yes, REDHAT-BUG-1977959 can potentially allow an attacker to read private information due to improper file permissions.