CVE-2020-1735

2 advisories.

PyPI/ansible CVE-2020-1735: medium 4.6, EPSS 0.47%

Path Traversal in Ansible

Action: Upgrade ansible to 2.7.18 or later.

pip install ansible==2.7.18

pip install ansible==2.8.12

pip install ansible==2.9.8

Affected

introduced	fixed	last affected
2.7.0a1	2.7.18	-
2.8.0a1	2.8.12	-
2.9.0a1	2.9.8	-

Fixed versions

2.7.18

2.8.12

2.9.8

Sources

CVE-2020-1735 · published 2021-04-07T20:35:24Z · modified 2024-09-09T21:31:34.410477Z · JSON

PyPI/ansible CVE-2020-1735: unknown, EPSS 0.47%

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All vers

Action: Upgrade ansible to 2.7.17 or later.

pip install ansible==2.7.17

pip install ansible==2.8.9

pip install ansible==2.9.6

Affected

introduced	fixed	last affected
0	2.7.17	-
2.8.0	2.8.9	-
2.9.0	2.9.6	-

Fixed versions

2.7.17

2.8.9

2.9.6

Sources

CVE-2020-1735 · published 2020-03-16T16:15:00Z · modified 2023-11-08T04:02:40.904927Z · JSON