CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-7481

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.037

EPSS Ranking 87.4%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 7.5

References

Products affected by CVE-2017-7481

Redhat » Ansible Engine » Version: 0.0.1

cpe:2.3:a:redhat:ansible_engine:0.0.1
Redhat » Ansible Engine » Version: 0.0.2

cpe:2.3:a:redhat:ansible_engine:0.0.2
Redhat » Ansible Engine » Version: 0.01

cpe:2.3:a:redhat:ansible_engine:0.01
Redhat » Ansible Engine » Version: 0.3

cpe:2.3:a:redhat:ansible_engine:0.3
Redhat » Ansible Engine » Version: 0.3.1

cpe:2.3:a:redhat:ansible_engine:0.3.1
Redhat » Ansible Engine » Version: 0.4

cpe:2.3:a:redhat:ansible_engine:0.4
Redhat » Ansible Engine » Version: 0.4.1

cpe:2.3:a:redhat:ansible_engine:0.4.1
Redhat » Ansible Engine » Version: 0.5

cpe:2.3:a:redhat:ansible_engine:0.5
Redhat » Ansible Engine » Version: 0.6

cpe:2.3:a:redhat:ansible_engine:0.6
Redhat » Ansible Engine » Version: 0.7

cpe:2.3:a:redhat:ansible_engine:0.7
Redhat » Ansible Engine » Version: 0.7.1

cpe:2.3:a:redhat:ansible_engine:0.7.1
Redhat » Ansible Engine » Version: 0.7.2

cpe:2.3:a:redhat:ansible_engine:0.7.2
Redhat » Ansible Engine » Version: 0.8

cpe:2.3:a:redhat:ansible_engine:0.8
Redhat » Ansible Engine » Version: 0.9

cpe:2.3:a:redhat:ansible_engine:0.9
Redhat » Ansible Engine » Version: 1.0

cpe:2.3:a:redhat:ansible_engine:1.0
Redhat » Ansible Engine » Version: 1.1

cpe:2.3:a:redhat:ansible_engine:1.1
Redhat » Ansible Engine » Version: 1.2

cpe:2.3:a:redhat:ansible_engine:1.2
Redhat » Ansible Engine » Version: 1.2.1

cpe:2.3:a:redhat:ansible_engine:1.2.1
Redhat » Ansible Engine » Version: 1.2.2

cpe:2.3:a:redhat:ansible_engine:1.2.2
Redhat » Ansible Engine » Version: 1.2.3

cpe:2.3:a:redhat:ansible_engine:1.2.3
Redhat » Ansible Engine » Version: 1.3.0

cpe:2.3:a:redhat:ansible_engine:1.3.0
Redhat » Ansible Engine » Version: 1.3.1

cpe:2.3:a:redhat:ansible_engine:1.3.1
Redhat » Ansible Engine » Version: 1.3.2

cpe:2.3:a:redhat:ansible_engine:1.3.2
Redhat » Ansible Engine » Version: 1.3.3

cpe:2.3:a:redhat:ansible_engine:1.3.3
Redhat » Ansible Engine » Version: 1.3.4

cpe:2.3:a:redhat:ansible_engine:1.3.4
Redhat » Ansible Engine » Version: 1.4.0

cpe:2.3:a:redhat:ansible_engine:1.4.0
Redhat » Ansible Engine » Version: 1.4.1

cpe:2.3:a:redhat:ansible_engine:1.4.1
Redhat » Ansible Engine » Version: 1.4.2

cpe:2.3:a:redhat:ansible_engine:1.4.2
Redhat » Ansible Engine » Version: 1.4.3

cpe:2.3:a:redhat:ansible_engine:1.4.3
Redhat » Ansible Engine » Version: 1.4.4

cpe:2.3:a:redhat:ansible_engine:1.4.4
Redhat » Ansible Engine » Version: 1.4.5

cpe:2.3:a:redhat:ansible_engine:1.4.5
Redhat » Ansible Engine » Version: 1.5.0

cpe:2.3:a:redhat:ansible_engine:1.5.0
Redhat » Ansible Engine » Version: 1.5.1

cpe:2.3:a:redhat:ansible_engine:1.5.1
Redhat » Ansible Engine » Version: 1.5.2

cpe:2.3:a:redhat:ansible_engine:1.5.2
Redhat » Ansible Engine » Version: 1.5.3

cpe:2.3:a:redhat:ansible_engine:1.5.3
Redhat » Ansible Engine » Version: 1.5.4

cpe:2.3:a:redhat:ansible_engine:1.5.4
Redhat » Ansible Engine » Version: 1.5.5

cpe:2.3:a:redhat:ansible_engine:1.5.5
Redhat » Ansible Engine » Version: 1.6.0

cpe:2.3:a:redhat:ansible_engine:1.6.0
Redhat » Ansible Engine » Version: 1.6.1

cpe:2.3:a:redhat:ansible_engine:1.6.1
Redhat » Ansible Engine » Version: 1.6.10

cpe:2.3:a:redhat:ansible_engine:1.6.10
Redhat » Ansible Engine » Version: 1.6.2

cpe:2.3:a:redhat:ansible_engine:1.6.2
Redhat » Ansible Engine » Version: 1.6.3

cpe:2.3:a:redhat:ansible_engine:1.6.3
Redhat » Ansible Engine » Version: 1.6.4

cpe:2.3:a:redhat:ansible_engine:1.6.4
Redhat » Ansible Engine » Version: 1.6.5

cpe:2.3:a:redhat:ansible_engine:1.6.5
Redhat » Ansible Engine » Version: 1.6.6

cpe:2.3:a:redhat:ansible_engine:1.6.6
Redhat » Ansible Engine » Version: 1.6.7

cpe:2.3:a:redhat:ansible_engine:1.6.7
Redhat » Ansible Engine » Version: 1.6.8

cpe:2.3:a:redhat:ansible_engine:1.6.8
Redhat » Ansible Engine » Version: 1.6.9

cpe:2.3:a:redhat:ansible_engine:1.6.9
Redhat » Ansible Engine » Version: 1.7.0

cpe:2.3:a:redhat:ansible_engine:1.7.0
Redhat » Ansible Engine » Version: 1.7.1

cpe:2.3:a:redhat:ansible_engine:1.7.1
Redhat » Ansible Engine » Version: 1.7.2

cpe:2.3:a:redhat:ansible_engine:1.7.2
Redhat » Ansible Engine » Version: 1.8.0

cpe:2.3:a:redhat:ansible_engine:1.8.0
Redhat » Ansible Engine » Version: 1.8.1

cpe:2.3:a:redhat:ansible_engine:1.8.1
Redhat » Ansible Engine » Version: 1.8.2

cpe:2.3:a:redhat:ansible_engine:1.8.2
Redhat » Ansible Engine » Version: 1.8.3

cpe:2.3:a:redhat:ansible_engine:1.8.3
Redhat » Ansible Engine » Version: 1.8.4

cpe:2.3:a:redhat:ansible_engine:1.8.4
Redhat » Ansible Engine » Version: 1.9.0

cpe:2.3:a:redhat:ansible_engine:1.9.0
Redhat » Ansible Engine » Version: 1.9.0.1

cpe:2.3:a:redhat:ansible_engine:1.9.0.1
Redhat » Ansible Engine » Version: 1.9.1

cpe:2.3:a:redhat:ansible_engine:1.9.1
Redhat » Ansible Engine » Version: 1.9.2

cpe:2.3:a:redhat:ansible_engine:1.9.2
Redhat » Ansible Engine » Version: 1.9.3

cpe:2.3:a:redhat:ansible_engine:1.9.3
Redhat » Ansible Engine » Version: 1.9.4

cpe:2.3:a:redhat:ansible_engine:1.9.4
Redhat » Ansible Engine » Version: 1.9.5

cpe:2.3:a:redhat:ansible_engine:1.9.5
Redhat » Ansible Engine » Version: 1.9.6

cpe:2.3:a:redhat:ansible_engine:1.9.6
Redhat » Ansible Engine » Version: 2.0

cpe:2.3:a:redhat:ansible_engine:2.0
Redhat » Ansible Engine » Version: 2.0.0.0

cpe:2.3:a:redhat:ansible_engine:2.0.0.0
Redhat » Ansible Engine » Version: 2.0.0.1

cpe:2.3:a:redhat:ansible_engine:2.0.0.1
Redhat » Ansible Engine » Version: 2.0.0.2

cpe:2.3:a:redhat:ansible_engine:2.0.0.2
Redhat » Ansible Engine » Version: 2.0.1.0

cpe:2.3:a:redhat:ansible_engine:2.0.1.0
Redhat » Ansible Engine » Version: 2.0.2.0

cpe:2.3:a:redhat:ansible_engine:2.0.2.0
Redhat » Ansible Engine » Version: 2.1.0.0

cpe:2.3:a:redhat:ansible_engine:2.1.0.0
Redhat » Ansible Engine » Version: 2.1.1.0

cpe:2.3:a:redhat:ansible_engine:2.1.1.0
Redhat » Ansible Engine » Version: 2.1.2.0

cpe:2.3:a:redhat:ansible_engine:2.1.2.0
Redhat » Ansible Engine » Version: 2.1.3.0

cpe:2.3:a:redhat:ansible_engine:2.1.3.0
Redhat » Ansible Engine » Version: 2.1.4.0

cpe:2.3:a:redhat:ansible_engine:2.1.4.0
Redhat » Ansible Engine » Version: 2.1.5.0

cpe:2.3:a:redhat:ansible_engine:2.1.5.0
Redhat » Ansible Engine » Version: 2.1.6.0

cpe:2.3:a:redhat:ansible_engine:2.1.6.0
Redhat » Ansible Engine » Version: 2.2.0.0

cpe:2.3:a:redhat:ansible_engine:2.2.0.0
Redhat » Ansible Engine » Version: 2.2.1.0

cpe:2.3:a:redhat:ansible_engine:2.2.1.0
Redhat » Ansible Engine » Version: 2.2.2.0

cpe:2.3:a:redhat:ansible_engine:2.2.2.0
Redhat » Ansible Engine » Version: 2.2.3.0

cpe:2.3:a:redhat:ansible_engine:2.2.3.0
Redhat » Ansible Engine » Version: 2.3.0.0

cpe:2.3:a:redhat:ansible_engine:2.3.0.0
Redhat » Ansible Engine » Version: 2.3.2.0

cpe:2.3:a:redhat:ansible_engine:2.3.2.0
Redhat » Ansible Engine » Version: 2.3.3.0

cpe:2.3:a:redhat:ansible_engine:2.3.3.0
Redhat » Ansible Engine » Version: 2.4

cpe:2.3:a:redhat:ansible_engine:2.4
Redhat » Gluster Storage » Version: 3.2

cpe:2.3:a:redhat:gluster_storage:3.2
Redhat » Openshift Container Platform » Version: 3.3

cpe:2.3:a:redhat:openshift_container_platform:3.3
Redhat » Openshift Container Platform » Version: 3.4

cpe:2.3:a:redhat:openshift_container_platform:3.4
Redhat » Openshift Container Platform » Version: 3.5

cpe:2.3:a:redhat:openshift_container_platform:3.5
Redhat » Openstack » Version: 10

cpe:2.3:a:redhat:openstack:10
Redhat » Openstack » Version: 11

cpe:2.3:a:redhat:openstack:11
Redhat » Storage Console » Version: 2.0

cpe:2.3:a:redhat:storage_console:2.0
Redhat » Virtualization » Version: 4.1

cpe:2.3:a:redhat:virtualization:4.1
Redhat » Virtualization Manager » Version: 4.1

cpe:2.3:a:redhat:virtualization_manager:4.1
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.04

cpe:2.3:o:canonical:ubuntu_linux:19.04
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-7481

Products

Pricing

Contact Us