TI-2018-07689 CVE-2018-10875 · GHSA-fc4h-467w-46rh
Untrusted search path in [UNKNOWN] ansible
Priority LOW 35
A flaw was found in ansible.
RHSA-2018:2321
Red Hat Virtualization security, bug fix, and enhancement update
Released 2018-07-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL 7-based RHEV-H for RHEV 4 (build requirements) imgbased-1.0.22-1.el7ev, python-imgbased-1.0.22-1.el7ev, redhat-release-virtualization-host-4.2-5.0.el7 +1
- Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.2-20180724.0.el7_5, redhat-virtualization-host-image-update-4.2-20180724.0.el7_5
Fixes 2 records
TI-2018-07688 CVE-2018-10874 · GHSA-3xvg-x47j-x75w
Untrusted search path in [UNKNOWN] ansible
Priority LOW 35
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.