Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ansible chroot、jail和zone connection插件后置链接漏洞
Vulnerability Description
Ansible是美国Ansible公司的一款计算机系统配置管理器,它可用于发布、管理和编排计算机系统。chroot、jail和zone connection都是其中的插件。chroot是一个根目录修改插件;jail是一个进程或应用程序限制插件;zone connection是一个连接插件。 Ansible 1.9.2之前的版本中的chroot、jail和zone connection插件存在安全漏洞。本地攻击者可利用该漏洞实施符号链接攻击,绕过被限制的环境。
CVSS Information
N/A
Vulnerability Type
N/A