| Package | Affected versions | Patched versions |
|---|---|---|
| ansible | ≥ 2.4, < 2.4.6.0≥ 2.5, < 2.5.6≥ 2.5.0a1, < 2.5.6≥ 2.6, < 2.6.1≥ 2.6.0a1, < 2.6.1< 2.4.6.0 | 2.4.6.02.5.62.6.1 |
| ansible engine | = 2.0= 2.4= 2.5= 2.6 | |
| ceph storage | = 2.0= 3.0 | |
| gluster storage | = 3.0.0 | |
| openshift | = 3.0 | |
| openstack | = 10= 12= 13 | |
| virtualization | = 4.0 | |
| virtualization host | = 4.0 |
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free