ALT-PU-2014-1508-1
Closed vulnerabilities
Published: 2020-01-09
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2014-2686
Ansible prior to 1.5.4 mishandles the evaluation of some strings.
Severity: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
References:
Published: 2020-02-20
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2014-4657
The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Closed bugs
v1.5.0