2 matches found
CVE-2016-8614
A flaw was found in Ansible before version 2.2.0. The aptkey module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key...
7.5CVSS0.02458EPSS
SaveExploits1References12
CVE-2016-8614: Improperly Implemented Security Check for Standard
A flaw was found in Ansible before version 2.2.0. The aptkey module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key...
7.5CVSS6.9AI score0.02458EPSS
SaveExploits1References3
20