REDHAT-BUG-2325171: Medium severity Ansible Ansible vulnerability

Published Nov 11, 2024

Updated

Unsafe tagging can be bypassed by using the hostvars object to indirectly reference the content and successfully template it

Requirements to exploit (if any): Access to mangle the content returned to a play (via lookup or module) that uses hostvars to reference the unsafe content.

Steps to reproduce : - have unsafe content from lookup or module, or defined: untrusted: !unsafe this{{varshould}}notbetemplated - reference it via the hostvars object debug: msg={{ hostvars['hostname']['untrusted']

Affected Software

1 affected component

Ansible Ansible

Event History

Nov 11, 2024

Data Sourced

via Red Hat·12:01 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2325171?

The severity of REDHAT-BUG-2325171 is classified as high due to the potential for unsafe content templating.

How do I fix REDHAT-BUG-2325171?

To fix REDHAT-BUG-2325171, ensure that your playbooks do not allow indirect referencing of unsafe content through the hostvars object.

What are the requirements to exploit REDHAT-BUG-2325171?

Exploitation of REDHAT-BUG-2325171 requires access to manipulate the content returned in a play that uses hostvars.

What impact does REDHAT-BUG-2325171 have on my system?

REDHAT-BUG-2325171 can lead to unauthorized access or execution of unsafe content, potentially affecting system integrity.

Is REDHAT-BUG-2325171 present in all versions of Red Hat?

REDHAT-BUG-2325171 may not be present in all versions; affected versions should be reviewed in vendor documentation.