1 matches found
Ansible: code injection when using ansible_facts as a subkey
A flaw was found in the Ansible Engine. When using ansiblefacts as a subkey of itself, and promoting it to a variable when injecting is enabled, overwriting the ansiblefacts after the clean, an attacker could take advantage of this by altering the ansiblefacts leading to privilege escalation or...
7.9CVSS7.2AI score0.00347EPSS
SaveExploits0References4
20