Command injection

2018-07-0213:29:00

PRIOn knowledge base

www.prio-n.com

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

30.7%

JSON

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker’s control, allowing to run arbitrary code as a result.

CPENameOperatorVersion
ansible_engineeq2.5
ansible_engineeq2.0
ansible_engineeq2.4
ansible_engineeq2.6
openstackeq10
openstackeq12
openstackeq13
virtualizationeq4.0
virtualization_hosteq4.0

Name	Operator	Version
ansible_engine	eq	2.5
ansible_engine	eq	2.0
ansible_engine	eq	2.4
ansible_engine	eq	2.6
openstack	eq	10
openstack	eq	12
openstack	eq	13
virtualization	eq	4.0
virtualization_host	eq	4.0