CVE-2021-3702

2022-08-2315:51:01

CWE-362

redhat

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

JSON

A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their directory at that name, and then have access to ansible-runner’s private_data_dir the next time ansible-runner made use of the private_data_dir. The highest Threat out of this flaw is to integrity and confidentiality.

CNA Affected

[
  {
    "product": "ansible-runner",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Affects ansible-runner 2.0"
      }
    ]
  }
]