| Package | Affected versions | Patched versions |
|---|---|---|
| ansible | ≥ 2.7.0a1, < 2.7.18≥ 2.8.0, < 2.8.9≥ 2.8.0a1, < 2.8.12≥ 2.9.0, < 2.9.6≥ 2.9.0a1, < 2.9.8< 2.7.17 | 2.7.182.8.92.8.122.9.62.9.82.7.17 |
| ansible | ≥ 2.8.0, < 2.8.11≥ 2.9.0, < 2.9.7< 2.7.17 | 2.8.112.9.72.7.17 |
| ansible tower | ≥ 3.3.5, ≤ 3.4.5≥ 3.5.0, ≤ 3.5.5≥ 3.6.0, ≤ 3.6.3≤ 3.3.4 | |
| cloudforms management engine | = 5.0 | |
| openstack | = 13 |
A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free