Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems

CAO 8.1CVE-2016-9587 · GHSA-m956-frf4-m2wr · PYSEC-2018-39 · Công bố 24/04/2018 · cập nhật 17/06/2026

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
ansible PyPI	`≥ 2.2.0.0, < 2.2.1.0< 2.1.4.0`	`2.2.1.02.1.4.0`
ansible ansible	`< 2.2.1`	`2.2.1`
ansible redhat	`< 2.1.4`	`2.1.4`
openstack redhat	`= 11`	Chưa có bản vá

Mô tả

Ansible before versions 2.1.4.0, 2.2.1.0 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.

Mô tả của NVD

Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.