{"id":"CVE-2018-10875","published":"2018-07-13T22:00:00Z","modified":"2024-08-05T07:46:47Z","title":"A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it…","vendor":null,"product":"ansible","tier":"tail","description":{"text":"A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.8,"severity":"HIGH","version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00592,"percentile":0.48222,"provenance":"source"},"cwes":[{"id":"CWE-426","name":"Untrusted Search Path"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:2166","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2152","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2150","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securitytracker.com/id/1041396","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10875","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHBA-2018:3788","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0054","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2151","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2321","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2585","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://www.debian.org/security/2019/dsa-4396","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://usn.ubuntu.com/4072-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":15.1,"factors":[{"name":"EPSS percentile","points":9.64},{"name":"CVSS severity","points":5.46}]},"affected":[{"ecosystem":"PyPI","package":"ansible","vulnerableRanges":["<2.4.6.0",">=2.5.0a1, <2.5.6",">=2.6.0a1, <2.6.1",">=2.5, <2.5.6",">=2.4, <2.4.6.0",">=2.6, <2.6.1"],"patched":["2.4.6.0","2.5.6","2.6.1"],"from":["GHSA-fc4h-467w-46rh","PYSEC-2018-43"],"provenance":"source"}],"euvd":{"id":"EUVD-2018-0016","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-ansible-cve-2018-10875","children":[{"from":"CVE-2018-10875","to":"CVE-2014-4678","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["lib/ansible/constants.py"],"commits":["https://github.com/ansible/ansible/commit/5429b85b9f6c2e640074176f36ff05fd5e4d1916","https://github.com/ansible/ansible/commit/ff980afefdbe4ceb828bdb1bb2eef03cf616bf63","https://github.com/ansible/ansible/commit/4cecbe81adbc655d7ab734165d3ac539f8ba5981"],"basis":"rarely changed file"}]},{"from":"CVE-2018-10875","to":"CVE-2017-7481","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["lib/ansible/constants.py"],"commits":["https://github.com/ansible/ansible/commit/ed56f51f185a1ffd7ea57130d260098686fcc7c2","https://github.com/ansible/ansible/commit/fd30f5328986f9e1da434474481f32bf918a600c","https://github.com/ansible/ansible/commit/ff980afefdbe4ceb828bdb1bb2eef03cf616bf63","https://github.com/ansible/ansible/commit/4cecbe81adbc655d7ab734165d3ac539f8ba5981"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2017-7550","published":"2017-11-21","fixed":"2.4.1.0","kev":false},{"cve":"CVE-2018-10855","published":"2018-07-02","fixed":"2.5.5","kev":false,"link":{"from":"CVE-2018-10855","to":"CVE-2018-10875","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:ansible","fromFixed":"2.4.5.0","toFixed":"2.4.6.0","daysApart":11}]}},{"cve":"CVE-2018-10874","published":"2018-07-02","fixed":"2.6.1","kev":false},{"cve":"CVE-2018-10875","published":"2018-07-13","fixed":"2.6.1","kev":false},{"cve":"CVE-2018-16837","published":"2018-10-23","fixed":"2.7.1","kev":false,"link":{"from":"CVE-2018-10875","to":"CVE-2018-16837","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:ansible","fromFixed":"2.6.1","toFixed":"2.6.7","daysApart":102}]}},{"cve":"CVE-2018-16876","published":"2019-01-03","fixed":"2.7.5","kev":false},{"cve":"CVE-2019-3828","published":"2019-03-27","fixed":"2.7.8","kev":false}],"package":"PyPI:ansible"}}