EUVD-2017-0001

Malware in sbrugna...

CVE-2014-4658

Summary: CVE-2014-4658 affects the Ansible vault subsystem and is caused by not setting the umask before creating or modifying a vault file, allowing local users to read sensitive key information. The issue is confirmed in Ansible releases prior to 1.5.5. What’s affected: vault file handling in A...