← voltar
CVE-2019-10156

CVE-2019-10156

CVSS 4.6 MEDIUMEPSS 1.8%CWE-200
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 4.6EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
30 jul 2019Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Produtos afetados
Red Hat · ansible

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://access.redhat.com/errata/RHSA-2019:3744https://access.redhat.com/errata/RHSA-2019:3789https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156https://github.com/ansible/ansible/pull/57188https://lists.debian.org/debian-lts-announce/2019/09/msg00016.htmlhttps://lists.debian.org/debian-lts-announce/2021/01/msg00023.htmlhttps://www.debian.org/security/2021/dsa-4950