Lucene search
K

15 matches found

OSV
OSV
added 2022/02/09 9:59 p.m.2 views

GHSA-X7JH-595Q-WQ82 Incorrect Permission Assignment for Critical Resource in Ansible

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

4.8CVSS6.7AI score0.00059EPSS
Exploits1References9
Github Security Blog
Github Security Blog
added 2022/02/09 9:59 p.m.24 views

Incorrect Permission Assignment for Critical Resource in Ansible

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

3.3CVSS5.1AI score0.00059EPSS
Exploits1References8Affected Software1
RedHat Linux
RedHat Linux
added 2020/09/01 7:32 p.m.7 views

ansible: atomic_move primitive sets permissive permissions

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

3.3CVSS7.1AI score0.00059EPSS
Exploits1References4
CNVD
CNVD
added 2020/03/19 12:0 a.m.2 views

Ansible Engine Information Disclosure Vulnerability

Ansible is a computer system configuration manager from the American company Ansible. The product can be used to publish, manage and orchestrate computer systems.Ansible Engine is one of the Ansible Engines. A security vulnerability exists in Ansible Engine versions 2.7.x, 2.8.x, and 2.9.x that...

3.3CVSS8.5AI score0.00059EPSS
Exploits1
OSV
OSV
added 2020/03/16 4:15 p.m.18 views

CVE-2020-1736

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

3.3CVSS3.5AI score0.00059EPSS
Exploits1References5
OSV
OSV
added 2020/03/16 4:15 p.m.3 views

DEBIAN-CVE-2020-1736

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

3.3CVSS6.7AI score0.00059EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2020/03/16 4:15 p.m.30 views

CVE-2020-1736

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

3.3CVSS6.7AI score0.00059EPSS
Exploits1References2
OSV
OSV
added 2020/03/16 4:15 p.m.0 views

UBUNTU-CVE-2020-1736

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

3.3CVSS7AI score0.00059EPSS
Exploits1References3
PyPA
PyPA
added 2020/03/16 4:15 p.m.4 views

PYSEC-2020-8

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

3.3CVSS6.2AI score0.00059EPSS
Exploits1References6Affected Software1
Prion
Prion
added 2020/03/16 4:15 p.m.28 views

Design/Logic Flaw

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

2.1CVSS3.7AI score0.00059EPSS
Exploits1References5Affected Software5
Cvelist
Cvelist
added 2020/03/16 3:3 p.m.17 views

CVE-2020-1736

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

2.2CVSS4.9AI score0.00059EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2020/03/16 3:3 p.m.31 views

CVE-2020-1736

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

3.3CVSS6.6AI score0.00059EPSS
Exploits1
CVE
CVE
added 2020/03/16 3:3 p.m.148 views

CVE-2020-1736

CVE-2020-1736 concerns Ansible Engine where moving a file with atomic_move cannot set the destination file mode. If the destination does not exist, the move can render the new file world-readable; if the file exists, permissions may be loosened before the move, potentially exposing sensitive data...

3.3CVSS3.6AI score0.00059EPSS
Exploits1References5Affected Software4
Positive Technologies
Positive Technologies
added 2020/03/16 12:0 a.m.4 views

PT-2020-14921

Name of the Vulnerable Software and Affected Versions Ansible Engine versions 2.7.x through 2.9.x Description A flaw was found in Ansible Engine when a file is moved using the atomic move primitive, as the file mode cannot be specified. This sets the destination file's world-readable if the...

4.8CVSS7AI score0.00059EPSS
Exploits1References172
RedhatCVE
RedhatCVE
added 2020/02/18 2:30 p.m.37 views

CVE-2020-1736

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

3.3CVSS0.6AI score0.00059EPSS
Exploits1References3
Rows per page
Query Builder