2 lines
7.5 KiB
JSON
2 lines
7.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"Ansible","vendor":"Red Hat","versions":[{"status":"affected","version":"2.7.16 and prior"},{"status":"affected","version":"2.8.8 and prior"},{"status":"affected","version":"2.9.5 and prior"}]}],"source":"secalert@redhat.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*","matchCriteriaId":"89338CDC-A956-4F24-A2A2-EA5CFD78F235","versionEndIncluding":"2.7.16","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*","matchCriteriaId":"D144C559-37B8-4DED-9D8B-61CE1134B3A5","versionEndIncluding":"2.8.8","versionStartIncluding":"2.8.0","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*","matchCriteriaId":"FA56E1B5-A742-4D2E-BF0B-C806689A3E05","versionEndIncluding":"2.9.5","versionStartIncluding":"2.9.0","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*","matchCriteriaId":"C3C5721F-050A-42A3-A71D-6C6BA23D58FE","versionEndIncluding":"3.3.4","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*","matchCriteriaId":"F5C0F920-A505-452D-AFAA-AE6C20FB25EF","versionEndIncluding":"3.4.5","versionStartIncluding":"3.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*","matchCriteriaId":"F2062F74-68D8-4E75-BC69-6038B519F823","versionEndIncluding":"3.5.5","versionStartIncluding":"3.5.0","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*","matchCriteriaId":"342D4A63-0972-413B-BD65-0495DBF1CDFB","versionEndIncluding":"3.6.3","versionStartIncluding":"3.6.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:redhat:cloudforms_management_engine:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7098B44F-56BF-42E3-8831-48D0A8E99EE2","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*","matchCriteriaId":"704CFA1A-953E-4105-BFBE-406034B83DED","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","matchCriteriaId":"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","matchCriteriaId":"80F0FA5D-8D3B-4C0E-81E2-87998286AF33","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","matchCriteriaId":"36D96259-24BD-44E2-96D9-78CE1D41F956","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43","vulnerable":true},{"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument \"password\" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs."},{"lang":"es","value":"Se detectó un fallo en Ansible versiones 2.7.16 y anteriores, versiones 2.8.8 y anteriores y versiones 2.9.5 y anteriores, cuando es establecida una contraseña con el argumento \"password\" del módulo svn, es usado en la línea de comandos svn, revelando a otros usuarios dentro del mismo nodo. Un atacante podría tomar ventaja de ello mediante una lectura del archivo cmdline de ese PID en particular en los procfs."}],"id":"CVE-2020-1739","lastModified":"2026-06-17T03:02:18.540","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"MEDIUM","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":3.3,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:N","version":"2.0"},"exploitabilityScore":3.4,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":3.9,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":1.3,"impactScore":2.5,"source":"secalert@redhat.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":3.9,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":1.3,"impactScore":2.5,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-03-12T18:15:12.337","references":[{"source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739"},{"source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"],"url":"https://github.com/ansible/ansible/issues/67797"},{"source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html"},{"source":"secalert@redhat.com","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/"},{"source":"secalert@redhat.com","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/"},{"source":"secalert@redhat.com","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2021/dsa-4950"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"url":"https://github.com/ansible/ansible/issues/67797"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2021/dsa-4950"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"secalert@redhat.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-200"}],"source":"nvd@nist.gov","type":"Secondary"}]}
|