The vulnerability of the win_unzip module in the Ansible configuration management system arises from incorrect restrictions on the path to the restricted-access directory. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

Ansible win_unzip vulnerability from improper restricted-path to a protected directory, risking confidentiality, integrity, and availability.

Reporter	Title	Published	Views	Family All 85
FreeBSD	ansible - win_unzip path normalization	12 Feb 202000:00	–	freebsd
AlpineLinux	CVE-2020-1737	9 Mar 202015:11	–	alpinelinux
CNVD	Ansible path traversal vulnerability	20 Feb 202000:00	–	cnvd
CVE	CVE-2020-1737	9 Mar 202015:11	–	cve
Cvelist	CVE-2020-1737	9 Mar 202015:11	–	cvelist
Debian CVE	CVE-2020-1737	9 Mar 202015:11	–	debiancve
EUVD	EUVD-2020-0031	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 30 Update: ansible-2.9.6-1.fc30	15 Mar 202014:00	–	fedora
Fedora	[SECURITY] Fedora 32 Update: ansible-2.9.6-1.fc32	16 Mar 202020:49	–	fedora
Fedora	[SECURITY] Fedora 31 Update: ansible-2.9.6-1.fc31	15 Mar 202013:43	–	fedora

Vulners

Node

red_hat ansibleRange2.7.0–2.7.17

red_hat ansibleRange2.8.0–2.8.9

red_hat ansibleRange2.9.0–2.9.6

Source	Link
access	www.access.redhat.com/security/cve/cve-2020-1737
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

16 Sep 2024 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 27.2

CVSS 37.5

EPSS0.00362