ansible-navigator (>=0.6.2 <=1.0.0b1) potentially affected by CVE-2021-3702 via ansible-runner (>=2.0.0a2 <=2.0.0.0a5)

ansible-runner PYPI version =2.0.0a2, =0.6.2, =1.0.0b1 Source cves: CVE-2021-3702 Source advisory: OSV:PYSEC-2022-43068...

ansible-navigator (>=0.6.2 <=1.0.0b1) potentially affected by CVE-2021-3701 via ansible-runner (>=2.0.0a2 <=2.0.0.0a5)

ansible-runner PYPI version =2.0.0a2, =0.6.2, =1.0.0b1 Source cves: CVE-2021-3701 Source advisory: OSV:PYSEC-2022-43067...

CVE-2021-3702

A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their directory at that name, and then have access to ansible-runner's privatedatadir the next time ansible-runner made use of the privatedatadir...

CVE-2021-3701

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate use...

PYSEC-2022-43067

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate use...

CVE-2021-3702

A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their directory at that name, and then have access to ansible-runner's privatedatadir the next time ansible-runner made use of the privatedatadir...

CVE-2021-3702

CVE-2021-3702 (ansible-runner) is a race condition where an attacker can monitor rapid creation/deletion of a temporary directory, substitute their own directory under that name, and gain access to ansible-runner’s private_data_dir on subsequent use. This local, authenticated attack could impact ...

CVE-2021-3702

A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their directory at that name, and then have access to ansible-runner's privatedatadir the next time ansible-runner made use of the privatedatadir...

CVE-2021-3701

CVE-2021-3701 affects Ansible Runner, where the default temporary files configuration can cause temp files to be created in world-writable locations. An attacker who can authenticate locally could pre-create or redirect such directories, enabling reading private information or causing Ansible Run...

CVE-2021-3701

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate use...

CVE-2021-3701

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate use...

Ansible Runner 安全漏洞

Ansible Runner is an open source tool and python library for Ansible. It can help when interacting with Ansible directly or as part of another system. A security vulnerability in Ansible Runner version 2.0.0, which stems from the default temporary file configuration being written to a world R/W...

Ansible Runner 竞争条件问题漏洞

Ansible Runner is an open source tool and python library for Ansible. It can help when interacting with Ansible directly or as part of another system. A security vulnerability exists in Ansible Runner version 2.0.0, which stems from the presence of a race condition vulnerability that can be...

PT-2022-10609 · Unknown · Ansible-Runner

Name of the Vulnerable Software and Affected Versions: ansible-runner version 2.0.0 Description: A flaw was found in ansible-runner where the default temporary files configuration is written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading...

Fedora: Security Advisory for golang-github-task (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: golang-github-task-3.14.0-3.fc36

A task runner / simpler Make alternative written in Go...

GitLab < 14.10.5 (CVE-2022-2227)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper access control in the runner jobs API in GitLab CE/EE affecting all versions prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows a previous maintainer of a project with a...

[SECURITY] Fedora 35 Update: golang-github-task-3.14.0-2.fc35

A task runner / simpler Make alternative written in Go...

cilantro 路径遍历漏洞

cilantro is an open source task runner from Deutsches Archäologisches Institut in Germany. Designed to manage long running distributed jobs that operate on file system objects . cilantro version 0.0.4 and earlier versions of a security vulnerability , the vulnerability stems from Flask's sendfile...

CVE-2022-2228

Information exposure in GitLab EE affecting all versions from 12.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker with the appropriate access tokens to obtain CI variables in a group with using IP-based access restrictions even if the GitLab Runner is calling...