Lucene search
FreeBSD50EC3A01-AD77-11EB-8528-8C164582FBACHistoryMay 15, 2020 - 12:00 a.m.
Ansible -- Insecure Temporary File
2020-05-1500:00:00
vuxml.freebsd.org
15
5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
37.9%
NVD reports:
An incomplete fix was found for the fix of the flaw CVE-2020-1733
ansible: insecure temporary directory when running become_user from
become directive. The provided fix is insufficient to prevent the
race condition on systems using ACLs and FUSE filesystems..
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | py36-ansible | = 2.9.0 | UNKNOWN |
| FreeBSD | any | noarch | py36-ansible | <= 2.9.9 | UNKNOWN |
| FreeBSD | any | noarch | py37-ansible | = 2.9.0 | UNKNOWN |
| FreeBSD | any | noarch | py37-ansible | <= 2.9.9 | UNKNOWN |
| FreeBSD | any | noarch | py38-ansible | = 2.9.0 | UNKNOWN |
| FreeBSD | any | noarch | py38-ansible | <= 2.9.9 | UNKNOWN |
| FreeBSD | any | noarch | py39-ansible | = 2.9.0 | UNKNOWN |
| FreeBSD | any | noarch | py39-ansible | <= 2.9.9 | UNKNOWN |
| FreeBSD | any | noarch | py36-ansible27 | = 2.9.0 | UNKNOWN |
| FreeBSD | any | noarch | py36-ansible27 | <= 2.9.9 | UNKNOWN |
References
Related
prion
prion
Race condition
2020-05-15 14:15:00
Race condition
2020-03-11 19:15:00
ubuntucve
ubuntucve
CVE-2020-10744
2020-05-15 00:00:00
CVE-2020-1733
2020-03-11 00:00:00
debiancve
debiancve
CVE-2020-10744
2020-05-15 14:15:00
CVE-2020-1733
2020-03-11 19:15:00
github
github
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
2022-02-09 21:59:42
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
2021-04-20 16:46:12
osv
osv
PYSEC-2020-208
2020-05-15 14:15:00
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
2022-02-09 21:59:42
CVE-2020-10744
2020-05-15 14:15:11
cve
cve
CVE-2020-10744
2020-05-15 14:15:00
CVE-2020-1733
2020-03-11 19:15:00
redhatcve
redhatcve
CVE-2020-10744
2020-05-14 15:56:33
CVE-2020-1733
2020-02-18 14:29:51
nessus
nessus
FreeBSD : Ansible -- Insecure Temporary File (50ec3a01-ad77-11eb-8528-8c164582fbac)
2021-05-07 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : Ansible vulnerabilities (USN-5315-1)
2023-10-16 00:00:00
Photon OS 3.0: Ansible PHSA-2020-3.0-0083
2020-04-29 00:00:00
ubuntu
ubuntu
Ansible vulnerabilities
2022-06-07 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5315-1)
2023-01-27 00:00:00
Debian: Security Advisory (DLA-2202-1)
2020-05-06 00:00:00
Fedora: Security Advisory for ansible (FEDORA-2020-f80154b5b4)
2020-04-30 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-10744 affecting package ansible 2.9.9-1
2021-07-08 21:56:43
veracode
veracode
Privilege Escalation Via Insecure Directory Creation
2020-02-28 02:48:37
alpinelinux
alpinelinux
CVE-2020-1733
2020-03-11 19:15:00
ibm
ibm
debian
debian
[SECURITY] [DLA 2202-1] ansible security update
2020-05-05 14:22:50
[SECURITY] [DSA 4950-1] ansible security update
2021-08-07 09:26:39
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2020-2.0-0233
2020-04-21 00:00:00
Critical Photon OS Security Update - PHSA-2022-0528
2022-10-18 00:00:00
Critical Photon OS Security Update - PHSA-2021-3.0-0344
2021-12-17 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: ansible-2.9.7-1.fc32
2020-04-27 02:46:08
[SECURITY] Fedora 30 Update: ansible-2.9.7-1.fc30
2020-04-27 03:07:00
[SECURITY] Fedora 31 Update: ansible-2.9.7-1.fc31
2020-04-27 04:48:07
redhat
redhat
(RHSA-2020:1543) Important: Ansible security and bug fix update (2.8.11)
2020-04-22 13:12:57
(RHSA-2020:1544) Important: Ansible security and bug fix update (2.7.17)
2020-04-22 13:13:10
(RHSA-2020:1541) Important: Ansible security and bug fix update (2.9.7)
2020-04-22 13:12:31
mageia
mageia
Updated ansible packages fix security vulnerabilities
2020-05-24 21:04:47
gentoo
gentoo
Ansible: Multiple vulnerabilities
2020-06-13 00:00:00
suse
suse
Security update for ansible (important)
2022-03-16 00:00:00
5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
37.9%
Related for 50EC3A01-AD77-11EB-8528-8C164582FBAC