Most recent entries from all

bdu:2019-02880

BREW-ansible-CVE-2018-10874

Affected: Homebrew: ansible

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.

cnvd-2018-12548

EUVD-2026-64832

fkie_cve-2018-10874

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.

GHSA-3xvg-x47j-x75w — Ansible Improper Input Validation vulnerability

Affected: PyPI: ansible

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.

gsd-2018-10874

PYSEC-2018-81

Affected: PyPI: ansible

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.

RHBA-2018:3788 — Red Hat Bug Fix Advisory: Red Hat OpenStack Platform 12 Bug Fix and Enhancement Advisory

ansible: Failed tasks do not honour no_log option allowing for secrets to be disclosed in logs ansible: Inventory variables are loaded from current working directory when running ad-hoc command that can lead to code execution ansible: ansible.cfg is being read from current working directory allowing possible code execution

SUSE-SU-2018:4130-1 — Security update for ansible

Security update for ansible

UBUNTU-CVE-2018-10874

Affected: Ubuntu:18.04:LTS: ansible

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.

WID-SEC-W-2024-0959 — Ansible: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode

Ein lokaler Angreifer kann mehrere Schwachstellen in Ansible ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.