Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
不可信的搜索路径
Vulnerability Title
Ansible 安全漏洞
Vulnerability Description
Ansible是美国Ansible公司的一款计算机系统配置管理器，它可用于发布、管理和编排计算机系统。 Ansible中存在安全漏洞，该漏洞源于系统在运行ad-hoc命令时从当前工作目录加载inventory变量。本地攻击者可通过修改变量利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A