Redhat: >> Ansible >> 1.2.1 Security Vulnerabilities
runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in /tmp/.
CVSS Score
1.9
EPSS Score
0.001
Published
2013-09-16
lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.
CVSS Score
3.3
EPSS Score
0.001
Published
2013-09-16
Page 4