{"id":"CVE-2018-10874","published":"2018-07-02T13:00:00Z","modified":"2024-08-05T07:46:47Z","title":"In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command…","vendor":null,"product":"ansible","tier":"tail","description":{"text":"In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.8,"severity":"HIGH","version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00489,"percentile":0.41981,"provenance":"source"},"cwes":[{"id":"CWE-426","name":"Untrusted Search Path"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:2166","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2152","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2150","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securitytracker.com/id/1041396","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://access.redhat.com/errata/RHBA-2018:3788","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0054","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2151","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2321","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2585","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://usn.ubuntu.com/4072-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]}],"priority":{"score":13.9,"factors":[{"name":"EPSS percentile","points":8.4},{"name":"CVSS severity","points":5.46}]},"affected":[{"ecosystem":"PyPI","package":"ansible","vulnerableRanges":["<2.4.6.0",">=2.5, <2.5.6",">=2.6, <2.6.1"],"patched":["2.4.6.0","2.5.6","2.6.1"],"from":["GHSA-3xvg-x47j-x75w","PYSEC-2018-81"],"provenance":"source"}],"euvd":{"id":"EUVD-2018-0020","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-unknown-ansible-cve-2016-9587","children":[{"from":"CVE-2018-10874","to":"CVE-2019-10206","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["lib/ansible/cli/__init__.py"],"commits":["https://github.com/ansible/ansible/commit/44874addc7ea136f83c67d5869047ece02645fdb","https://github.com/ansible/ansible/commit/1f80949f964a946773f9d3ac1899535bd2cc2b8e","https://github.com/ansible/ansible/commit/4b5aed4e5af4c7aab621662f50a289e99b8ac393","https://github.com/ansible/ansible/commit/d39488ece44956f6a169a498b067bbef54552be1"],"basis":"rarely changed file"}]},{"from":"CVE-2018-10874","to":"CVE-2019-14856","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["lib/ansible/cli/__init__.py"],"commits":["https://github.com/ansible/ansible/commit/44874addc7ea136f83c67d5869047ece02645fdb","https://github.com/ansible/ansible/commit/1f80949f964a946773f9d3ac1899535bd2cc2b8e","https://github.com/ansible/ansible/commit/16684f118715a52e1c46d437652add9ca36423de","https://github.com/ansible/ansible/commit/2cbd8775ca1271195169f62122df1f88b532e74f"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2017-7481","published":"2018-07-19","fixed":"2.4.0.0","kev":false},{"cve":"CVE-2017-7550","published":"2017-11-21","fixed":"2.4.1.0","kev":false},{"cve":"CVE-2018-10855","published":"2018-07-02","fixed":"2.5.5","kev":false,"link":{"from":"CVE-2018-10855","to":"CVE-2018-10874","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:ansible","fromFixed":"2.4.5.0","toFixed":"2.4.6.0","daysApart":0}]}},{"cve":"CVE-2018-10874","published":"2018-07-02","fixed":"2.6.1","kev":false},{"cve":"CVE-2018-10875","published":"2018-07-13","fixed":"2.6.1","kev":false},{"cve":"CVE-2018-16837","published":"2018-10-23","fixed":"2.7.1","kev":false},{"cve":"CVE-2018-16876","published":"2019-01-03","fixed":"2.7.5","kev":false}],"package":"PyPI:ansible"}}