| Package | Affected versions | Patched versions |
|---|---|---|
| ansible | ≥ 2.5, < 2.5.6≥ 2.6, < 2.6.1< 2.4.6.0 | 2.5.62.6.12.4.6.0 |
| ansible engine | = 2.0= 2.4= 2.5= 2.6 | |
| openstack | = 10= 12= 13 | |
| virtualization | = 4.0 | |
| virtualization host | = 4.0 |
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free