Ansible Sandbox Escape via Symlink Attack

ALTO 7.8CVE-2015-6240 · GHSA-wwwh-47wp-m522 · PYSEC-2017-3 · Published 07/06/2017 · updated 17/06/2026

In breve

CVE-2015-6240 è una vulnerabilità ALTO (CVSS 7.8) che riguarda ansible, ansible (redhat).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.45%, superiore al 38.9% delle vulnerabilità.
Correzione: aggiornare a 1.9.2 o successiva.

Package	Affected versions	Patched versions
ansible PyPI	`< 1.9.2`	`1.9.2`
ansible redhat	`≤ 1.9.1`	No fix yet

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.

NVD description

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 1.9.2

1.9.2

≤ 1.9.1

No fix yet

Description

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.

NVD description

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.

Altre vulnerabilità di ansible

Vedi tutto →