Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1596528 - (CVE-2018-10874) CVE-2018-10874 ansible: Inventory variables are loaded from current working directory when running ad-hoc command that can lead to code execution
CVE-2018-10874 ansible: Inventory variables are loaded from current working d...
Status: NEW
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
impact=moderate,public=20180629,repor...
: Security
Depends On: 1602768 1602769 1602771 1610582 1610583 1598807 1598808 1598809 1598810 1598811 1598812 1599296 1602770 1607723 1610584 1636192 1636194
Blocks: 1595939
  Show dependency tree / graph
 
Reported: 2018-06-29 03:56 EDT by Adam Mariš
Modified: 2018-10-19 17:35 EDT (History)
83 users (show)

See Also:
Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed:
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2018:2150 None None None 2018-07-10 05:49 EDT
Red Hat Product Errata RHSA-2018:2151 None None None 2018-07-10 07:33 EDT
Red Hat Product Errata RHSA-2018:2152 None None None 2018-07-10 08:56 EDT
Red Hat Product Errata RHSA-2018:2166 None None None 2018-07-10 13:20 EDT
Red Hat Product Errata RHSA-2018:2321 None None None 2018-07-31 13:49 EDT
Red Hat Product Errata RHSA-2018:2585 None None None 2018-08-29 12:05 EDT

  None (edit)
Description Adam Mariš 2018-06-29 03:56:12 EDT 
It was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.
Comment 1 Laura Pardo 2018-06-29 11:08:09 EDT 
Acknowledgments:

Name: Michael Scherer (OSAS)
Comment 2 Borja Tarraso 2018-07-06 09:54:01 EDT 
Created ansible tracking bugs for this issue:

Affects: epel-all [bug 1598810]
Affects: fedora-all [bug 1598809]
Comment 6 errata-xmlrpc 2018-07-10 05:48:47 EDT 
This issue has been addressed in the following products:

  Red Hat Ansible Engine 2.5 for RHEL 7

Via RHSA-2018:2150 https://access.redhat.com/errata/RHSA-2018:2150
Comment 7 errata-xmlrpc 2018-07-10 07:32:38 EDT 
This issue has been addressed in the following products:

  Red Hat Ansible Engine 2 for RHEL 7

Via RHSA-2018:2151 https://access.redhat.com/errata/RHSA-2018:2151
Comment 8 errata-xmlrpc 2018-07-10 08:56:08 EDT 
This issue has been addressed in the following products:

  Red Hat Ansible Engine 2.4 for RHEL 7

Via RHSA-2018:2152 https://access.redhat.com/errata/RHSA-2018:2152
Comment 9 errata-xmlrpc 2018-07-10 13:19:58 EDT 
This issue has been addressed in the following products:

  Red Hat Ansible Engine 2.6 for RHEL 7

Via RHSA-2018:2166 https://access.redhat.com/errata/RHSA-2018:2166
Comment 12 errata-xmlrpc 2018-07-31 13:49:29 EDT 
This issue has been addressed in the following products:

  Red Hat Virtualization 4 for Red Hat Enterprise Linux 7

Via RHSA-2018:2321 https://access.redhat.com/errata/RHSA-2018:2321
Comment 17 errata-xmlrpc 2018-08-29 12:05:03 EDT 
This issue has been addressed in the following products:

  Red Hat OpenStack Platform 13.0 (Queens)

Via RHSA-2018:2585 https://access.redhat.com/errata/RHSA-2018:2585
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.