tocsin

PyPI/ansible CVE-2019-3828: unknown, EPSS 0.53%

Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible contr

Action: Upgrade ansible to 2.5.15 or later.

pip install ansible==2.5.15
pip install ansible==2.6.14
pip install ansible==2.7.8

Affected

introducedfixedlast affected
2.5.02.5.15-
2.6.02.6.14-
2.7.02.7.8-

Fixed versions

2.5.152.6.142.7.8

Sources

CVE-2019-3828 · published · modified · JSON