Path traversal in Red Hat Ansible Engine - CVE-2020-10691
Published: May 6, 2020 / Updated: July 7, 2020
Vulnerability identifier: #VU27558
CSH Severity: Medium
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-10691
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to perform directory traversal attacks.
The vulnerability exists when extracting a collection .tar.gz file, the directory is created without sanitizing the filename when running ansible-galaxy collection install. A remote user can send a specially crafted HTTP request and overwrite any file within the system.
This vulnerability affects versions 2.9.x prior to 2.9.7.
Affected software
Red Hat Ansible Engine
ansible (Alpine package)
ansible
ansible (Red Hat package)
Fedora
Ansible
ansible (Alpine package)
ansible
ansible (Red Hat package)
Fedora
Ansible
How to mitigate CVE-2020-10691
Install update from vendor's website.
Red Hat Ansible Engine - update to 2.9.7
ansible (Alpine package) - update to 2.9.7-r0
ansible - addressed in versions 2.9.7-1.el7, 2.9.7-1.el8, 2.9.7-1.fc30, 2.9.7-1.fc31, 2.9.7-1.fc32
Ansible - addressed in versions 2.9.7-1.el7ae, 2.9.7-1.el8ae
ansible (Red Hat package) - addressed in versions 2.9.7-1.el7ae, 2.9.7-1.el8ae
ansible (Alpine package) - update to 2.9.7-r0
ansible - addressed in versions 2.9.7-1.el7, 2.9.7-1.el8, 2.9.7-1.fc30, 2.9.7-1.fc31, 2.9.7-1.fc32
Ansible - addressed in versions 2.9.7-1.el7ae, 2.9.7-1.el8ae
ansible (Red Hat package) - addressed in versions 2.9.7-1.el7ae, 2.9.7-1.el8ae
External References
Related Security Bulletins
- Path traversal in Red Hat Ansible Engine
- Path traversal in ansible (Alpine package)
- Ansible Engine 2 update for ansible
- Red Hat update for Ansible engine
- Fedora 32 update for ansible
- Fedora 30 update for ansible
- Fedora 31 update for ansible
- Fedora EPEL 8 update for ansible
- Fedora EPEL 7 update for ansible