Read the docs
Red Hat Security Advisory

RHSA-2019:0430

ansible security and bug fix update

Released 2019-02-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

TI-2019-02840 CVE-2019-3828 · GHSA-74vq-h4q8-x6jv

Path traversal in Red Hat Ansible

Priority LOW 20

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not r…

CVSS 3.1MEDIUM 4.2 Local High privileges User interaction EPSS 0.00522 Published 2019-03-27 Partial fix · 2.5.15, 2.6.14 +1 CWE-22