CVE-2016-9587

This commit is contained in:
Laura Pardo 2018-04-24 12:15:26 -03:00
parent fee4c87beb
commit 793096f05c
No known key found for this signature in database
GPG Key ID: 35A269F0007371B6

View File

@ -19,7 +19,7 @@
"description_data": [
{
"lang": "eng",
"value": "Ansible before versions ansible 2.1.4, ansible 2.2.1 is vulnerable to an input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges."
"value": "Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges."
}
]
},