CVE-2014-3498

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands...

CVE-2014-3498

CVE-2014-3498 affects the Ansible user module prior to 1.6.6. The vulnerability allows remote authenticated users to execute arbitrary commands by passing unfiltered content into variables, which may be processed via Jinja2 template rendering, potentially leading to arbitrary code execution on th...