GitHub Advisoryadvisory · PyPI

GHSA-fj24-ghp9-39v3 Ansible uses a socket with predictable filename in /tmp

LOW Published 2022-05-14 Modified 2024-09-04 Official page ↗
Aliases
CVE-2013-4259
Ecosystem
PyPI
Packages
ansible
Severity
Low
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-330
Reviewed
2023-08-28

Affected packages

• PyPI ansible: < 1.2.3 → fixed in 1.2.3

Description

`runner/connection_plugins/ssh.py` in Ansible before 1.2.3, when using `ControlPersist`, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in `/tmp/`.

Related

Alias · CVE (1)

  • CVE-2013-4259 runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a… vulnerability

Weakness · CWE (1)

  • CWE-330 Use of Insufficiently Random Values weakness

References