{"id":"CVE-2014-2686","published":"2020-01-09T12:25:30Z","modified":"2024-08-06T10:21:35Z","title":"Ansible prior to 1.5.4 mishandles the evaluation of some strings","vendor":null,"product":null,"tier":"tail","description":{"text":"Ansible prior to 1.5.4 mishandles the evaluation of some strings.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.0119,"percentile":0.6784,"provenance":"source"},"cwes":[],"references":[{"url":"https://groups.google.com/forum/#%21searchin/ansible-project/1.5.4/ansible-project/MUQxiKwSQDc/id6aVaawVboJ","tags":["x_refsource_MISC"]}],"priority":{"score":13.6,"factors":[{"name":"EPSS percentile","points":13.57}]},"affected":[{"ecosystem":"PyPI","package":"ansible","vulnerableRanges":["<1.5.4"],"patched":["1.5.4"],"from":["GHSA-49m5-2838-q2rv","PYSEC-2020-198"],"provenance":"source"}],"euvd":{"id":"EUVD-2020-0009","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-ansible-cve-2018-10875","children":[{"from":"CVE-2014-2686","to":"CVE-2014-4678","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["lib/ansible/utils/__init__.py"],"commits":["https://github.com/ansible/ansible/commit/998793fd0ab55705d57527a38cee5e83f535974c","https://github.com/ansible/ansible/commit/5429b85b9f6c2e640074176f36ff05fd5e4d1916"],"basis":"rarely changed file"}]}]}}