2 matches found
Important: ansible
Issue Overview: A local privilege escalation vulnerability was found in the ansible.posix authorizedkey module. The module's keyfile function uses os.chown instead of os.lchown and opens files without ONOFOLLOW when managing SSH authorized keys. An unprivileged local user can pre-stage symbolic...
7.3CVSS7.1AI score0.00161EPSS
SaveExploits0
Ansible 后置链接漏洞
Ansible is an easy-to-use IT automation system developed under the open source license. Ansible has a post-installation link vulnerability, which originates from the Posix authorizedkey module. The keyfile function uses os.chown instead of os.lchown, and does not use ONOFOLLOW to open files, whic...
7.3CVSS5.9AI score0.00161EPSS
SaveExploits0References3
20