UBUNTU-CVE-2021-3533

Rejected reason: This vulnerability does not meet the criteria for a security vulnerability...

CVE-2021-3533

CVE-2021-3533 refers to a race condition in Ansible’s async code that could allow a local authenticated attacker to obtain sensitive information. Connected sources identify affected products as Ansible Tower 3.7 and Ansible Automation Platform 1.2, with exploitation tied to setting the ANSIBLE AS...

CVE-2021-3533

...

CVE-2021-3533

A flaw was found in Ansible if an ansible user sets ANSIBLEASYNCDIR to a subdirectory of a world writable directory . When this occurs, there is a race condition on the managed machine. A malicious, non-privileged account on the remote machine can exploit the race condition to access the async...