High severity · published Jun 22, 2018
CVE-2017-7466
Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems
8.0
CVSS
3.1%
EPSS
No
On KEV
Description
Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Ansible · Redhat
before 2.3 · source: NVD
OP
Openstack · Redhat
10; 11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-7466
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-7466
Third Party Advisory
http://www.securityfocus.com/bid/97595
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1244
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1334
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1476
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1499
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1599
More from Ansible
9.8
CVE-2014-4657
The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions
9.8
CVE-2014-4678
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions
9.8
CVE-2014-4967
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing…
9.8
CVE-2014-4966
Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to…
9.8
CVE-2017-7550
A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module