AN
Product
Ansible
45
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 13Medium 20Low 3
Watch
Add Ansible to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-4657 | 9.8 | Feb 20 | The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions Affected: before 1.5.4 |
| CVE-2014-4678 | 9.8 | Feb 20 | The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions Affected: before 1.6.4 |
| CVE-2014-4967 | 9.8 | Feb 18 | Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing… Affected: before 1.6.7 |
| CVE-2014-4966 | 9.8 | Feb 18 | Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to… Affected: before 1.6.7 |
| CVE-2017-7550 | 9.8 | Nov 21 | A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module Affected: 2.3.0 before 2.3.3; 2.4.0 before 2.4.1 |
| CVE-2016-8628 | 9.1 | Jul 31 | Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller Affected: before 2.2.0 |
Showing 6