Improper Neutralization of Argument Delimiters in a Command in Red Hat Ansible Engine - CVE-2020-1738
Published: June 15, 2020
Vulnerability identifier: #VU29027
CSH Severity: Low
CVSS v4: 1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-1738
CWE-ID: CWE-88
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to compromise the target system.
The vulnerability exists when the module package or service is used and the parameter "use" is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file.
Affected software
Red Hat Ansible Engine
Gentoo Linux
Fedora
openEuler
ansible
ansible-help
Gentoo Linux
Fedora
openEuler
ansible
ansible-help
How to mitigate CVE-2020-1738
Install updates from vendor's website.
Red Hat Ansible Engine - addressed in versions 2.7.17, 2.8.11, 2.9.7
ansible - update to 2.5.5-2
ansible-help - update to 2.5.5-2
ansible - addressed in versions 2.9.7-1.el7, 2.9.7-1.el8
ansible - update to 2.5.5-2
ansible-help - update to 2.5.5-2
ansible - addressed in versions 2.9.7-1.el7, 2.9.7-1.el8