Ansible CVE-2019-3828 Directory Traversal Vulnerability
BID:107650
Info
Ansible CVE-2019-3828 Directory Traversal Vulnerability
| Bugtraq ID: | 107650 |
| Class: | Input Validation Error |
| CVE: |
CVE-2019-3828 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 12 2019 12:00AM |
| Updated: | Feb 12 2019 12:00AM |
| Credit: | Kevin Backhouse |
| Vulnerable: |
Redhat OpenStack Platform 14.0 (Rocky) Redhat OpenStack Platform 13.0 (Queens) Redhat OpenStack Platform 10 Redhat OpenShift Enterprise 3.2 Redhat OpenShift Container Platform 3.7 Redhat OpenShift Container Platform 3.6 Redhat OpenShift Container Platform 3.5 Redhat OpenShift Container Platform 3.4 Redhat OpenShift Container Platform 3.3 Redhat Ceph Storage 3 Redhat Ceph Storage 2 Redhat Ansible Tower 3 for RHEL 7 0 Redhat Ansible Engine 2.7 Redhat Ansible Engine 2.6 Redhat Ansible Engine 2.5 Redhat Ansible Engine 2 AnsibleWorks ansible 2.7.7 AnsibleWorks ansible 2.7.5 AnsibleWorks ansible 2.7.4 AnsibleWorks ansible 2.7.3 AnsibleWorks ansible 2.7.2 AnsibleWorks ansible 2.7.1 AnsibleWorks ansible 2.7 AnsibleWorks ansible 2.6.13 AnsibleWorks ansible 2.6.11 AnsibleWorks ansible 2.6.10 AnsibleWorks ansible 2.6.9 AnsibleWorks ansible 2.6.8 AnsibleWorks ansible 2.6.7 AnsibleWorks ansible 2.6.6 AnsibleWorks ansible 2.6.5 AnsibleWorks ansible 2.6 AnsibleWorks ansible 2.5.14 AnsibleWorks ansible 2.5.13 AnsibleWorks ansible 2.5.12 AnsibleWorks ansible 2.5.11 AnsibleWorks ansible 2.5.10 AnsibleWorks ansible 2.5 |
| Not Vulnerable: |
AnsibleWorks ansible 2.7.8 AnsibleWorks ansible 2.6.14 AnsibleWorks ansible 2.5.15 |
Exploit / POC
Ansible CVE-2019-3828 Directory Traversal Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Ansible CVE-2019-3828 Directory Traversal Vulnerability
References:
References:
- Bug 1676689 CVE-2019-3828 Ansible: path traversal in the fetch module (Redhat)
- Disallow use of remote home directories containing .. in their path (CVE-2019-38 (Github)
- RHSA-2019:0430 - Security Advisory (Redhat)
- RHSA-2019:0431 - Security Advisory (Redhat)
- RHSA-2019:0432 - Security Advisory (Redhat)
- RHSA-2019:0433 - Security Advisory (Redhat)