Alpine/ansible-base: high 7.8
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing t
Action: Upgrade ansible-base to 2.6.3-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.3-r0 | - |
Fixed versions
| 2.6.3-r0 |
Sources
- osv: ALPINE-CVE-2018-10875#Alpine:v3.14/ansible-base
- https://security.alpinelinux.org/vuln/CVE-2018-10875
published · modified · JSON