Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Regiwils

#30779de 53,633
8.5CVSS total
Vulnerabilidades · 1
PT-2017-15551
8.5
2017-09-14
Ansible · Ansible-Vault · CVE-2017-2809
**Name of the Vulnerable Software and Affected Versions** ansible-vault versions prior to 1.0.5 **Description** The issue concerns the yaml loading functionality, where a specially crafted vault can execute arbitrary python commands, resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability. **Recommendations** For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue.