Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2016-7062

rhscon-ceph: password leak by command line parameter

rhscon-ceph in Red Hat Storage Console 2 x86_64 and Red Hat Storage Console Node 2 x86_64 allows local users to obtain the password as cleartext.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Rhscon Storage Console Storage Console Node
CVE-2017-7481

ansible: Security issue with lookup return not tainting the jinja2 environment

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.

CVSS 3.1 · 9.8 Critical EPSS 4.7% KEV · Not listed
Vendors
Canonical Debian Redhat
Products
Ubuntu Linux Debian Linux Ansible Engine and 11 more
CVE-2017-7466

ansible: Arbitrary code execution on control node (incomplete fix for CVE-2016-9587)

Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.

CVSS 3.0 · 8 High EPSS 3.0% KEV · Not listed
Vendors
Redhat
Products
Ansible Openshift Openstack and 3 more
CVE-2016-9587

Ansible: Compromised remote hosts can lead to running commands on the Ansible controller

Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.

CVSS 3.1 · 8.1 High EPSS 17.0% KEV · Not listed
Vendors
Ansible Redhat
Products
Ansible Ansible Openshift and 4 more