CVE-2021-3702
CVE-2021-3702
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
23 Aug 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their directory at that name, and then have access to ansible-runner's private_data_dir the next time ansible-runner made use of the private_data_dir. The highest Threat out of this flaw is to integrity and confidentiality.
Affected products
n/a · ansible-runnerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →