tocsin

CVE-2020-10684

2 advisories.

PyPI/ansible CVE-2020-10684: high 7.1, EPSS 0.33%

Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible

Action: Upgrade ansible to 2.7.17 or later.

pip install ansible==2.7.17
pip install ansible==2.8.11
pip install ansible==2.9.7

Affected

introducedfixedlast affected
2.7.0a12.7.17-
2.8.0a12.8.11-
2.9.0a12.9.7-

Fixed versions

2.7.172.8.112.9.7

Sources

CVE-2020-10684 · published · modified · JSON

PyPI/ansible CVE-2020-10684: unknown, EPSS 0.33%

A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively, when using ansible_facts as a subkey of itself and promoting it to a variable whe

Action: Upgrade ansible to 2.7.17 or later.

pip install ansible==2.7.17
pip install ansible==2.8.9
pip install ansible==2.9.6

Affected

introducedfixedlast affected
2.7.02.7.17-
2.8.02.8.9-
2.9.02.9.6-

Fixed versions

2.7.172.8.92.9.6

Sources

CVE-2020-10684 · published · modified · JSON