Arbitrary Code Execution

🗓️ 04 Dec 2024 08:05:59Reported by Veracode Vulnerability DatabaseType

Ansible-Core vulnerability allows attackers to execute arbitrary code via unsafe templating in playbooks.

Reporter	Title	Published	Views	Family All 68
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v5.1.1 is vulnerable to multiple Operator package issues	2 Apr 202517:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to multiple Operator package issues	1 May 202521:38	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2024-11079)	28 May 202615:37	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	31 May 202514:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	16 Apr 202521:01	–	ibm
Tenable Nessus	Amazon Linux 2023 : ansible-core, ansible-test (ALAS2023-2025-820)	24 Jan 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : ansible-core, ansible-test (ALAS2023-2025-860)	26 Feb 202500:00	–	nessus
Tenable Nessus	Debian dla-4502 : ansible - security update	17 Mar 202600:00	–	nessus
Tenable Nessus	Fedora 44 : ansible / ansible-core (2025-2842f20915)	11 Dec 202500:00	–	nessus

Vulners

Node

ansible_core ansible_coreRange2.18.0b1–2.18.0python

ansible_core ansible_coreRange0.0.1a1–2.16.13python

ansible_core ansible_coreRange2.17.0b1–2.17.6python

Source	Link
github	www.github.com/ansible/ansible/commit/98774d15d7748ebaaaf2e83942cc7e8d39f7280e
access	www.access.redhat.com/security/cve/CVE-2024-11079
github	www.github.com/ansible/ansible/pull/84299
github	www.github.com/ansible/ansible/blob/v2.18.1/changelogs/CHANGELOG-v2.18.rst
access	www.access.redhat.com/errata/RHSA-2024:10770
github	www.github.com/ansible/ansible/commit/70e83e72b43e05e57eb42a6d52d01a4d9768f510
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/ansible/ansible/commit/2936b80dbbc7efb889934aeec80f6142c10266ce
github	www.github.com/ansible/ansible/pull/84339
github	www.github.com/advisories/GHSA-99w6-3xph-cx78

18 Dec 2024 06:31Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.5

EPSS0.00502

SSVC