Lucene search

K
osvGoogleOSV:PYSEC-2017-5
HistorySep 14, 2017 - 7:29 p.m.

PYSEC-2017-5

2017-09-1419:29:00
Google
osv.dev
4

0.005 Low

EPSS

Percentile

75.8%

An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.

0.005 Low

EPSS

Percentile

75.8%