PyPI/ansible CVE-2014-3498: unknown, EPSS 2.52%

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.

Action: Upgrade ansible to 1.6.6 or later.

pip install ansible==1.6.6

Affected

Fixed versions

Sources

• osv: PYSEC-2017-2
• https://github.com/ansible/ansible/commit/8ed6350e65c82292a631f08845dfaacffe7f07f5
• https://bugzilla.redhat.com/show_bug.cgi?id=1335551
• https://github.com/advisories/GHSA-4cvm-5776-jx9f

CVE-2014-3498 · published 2017-06-08T18:29:00Z · modified 2026-06-10T17:00:16.426433579Z · JSON