PT-2017-15551 · Ansible · Ansible-Vault

Regiwils · Published 2017-09-14 · Updated 2022-04-19 · CVE-2017-2809

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions ansible-vault versions prior to 1.0.5

Description The issue concerns the yaml loading functionality, where a specially crafted vault can execute arbitrary python commands, resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.

Recommendations For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2017-2809

GHSA-C2W9-48QC-QPJ4

PYSEC-2017-5

Affected Products

Ansible-Vault

References · 13

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2017-0305 · Exploit
• https://osv.dev/vulnerability/PYSEC-2017-5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2809 · Security Note
• https://osv.dev/vulnerability/GHSA-c2w9-48qc-qpj4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-2809 · Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/ansible-vault/PYSEC-2017-5.yaml · Note
• https://github.com/tomoh1r/ansible-vault/issues/4 · Note
• https://github.com/tomoh1r/ansible-vault/commit/3f8f659ef443ab870bb19f95d43543470168ae04 · Note
• https://github.com/tomoh1r/ansible-vault/blob/v1.0.5/CHANGES.txt · Note
• https://github.com/tomoh1r/ansible-vault · Note
• https://github.com/advisories/GHSA-c2w9-48qc-qpj4 · Note
• https://web.archive.org/web/20171206173637/http://securityfocus.com/bid/100824 · Note
• http://securityfocus.com/bid/100824 · Note