Oval Definition:oval:org.opensuse.security:def:20144967
Revision Date:2022-06-30Version:1
Title:CVE-2014-4967
Description:

Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with (1) a trailing " src=" clause, (2) a trailing " temp=" clause, or (3) a trailing " validate=" clause accompanied by a shell command.
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2014-4967
SUSE CVE-2014-4967
Platform(s):openSUSE Tumbleweed
SUSE OpenStack Cloud 7
Product(s):
Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND ansible is affected
  • Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND ansible-2.2.0.0-1.1 is installed
  • BACK