Kurz gesagt
- CVE-2017-2809 ist eine Schwachstelle (HOCH (CVSS 7.8)) in ansible-vault, ansible-vault (ansible-vault project).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 3.0%, höher als bei 87.3% aller Schwachstellen.
- Abhilfe: auf 1.0.5 oder neuer aktualisieren.
Description
An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.
NVD description
An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free