4354 matches found
Command injection
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...
CVE-2014-3498
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...
UBUNTU-CVE-2014-3498
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...
CVE-2014-3498
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...
PYSEC-2017-2
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...
CVE-2014-3498
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...
DEBIAN-CVE-2014-3498
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...
CVE-2014-3498
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...
CVE-2014-3498
CVE-2014-3498 affects the Ansible user module prior to 1.6.6. The vulnerability allows remote authenticated users to execute arbitrary commands by passing unfiltered content into variables, which may be processed via Jinja2 template rendering, potentially leading to arbitrary code execution on th...
CVE-2014-3498
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...
Code injection
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...
DEBIAN-CVE-2015-6240
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...
CVE-2015-6240
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...
CVE-2015-6240
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...
PYSEC-2017-3
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...
CVE-2015-6240
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...
PYSEC-2017-3
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...
UBUNTU-CVE-2015-6240
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...
CVE-2015-6240
CVE-2015-6240 concerns Ansible, where the chroot, jail, and zone connection plugins allow a local attacker to escape a restricted environment via a symlink attack. Affected software is Ansible versions older than 1.9.2, as described in multiple sources (including GHSA and Debian/Ubuntu advisories...