CVE-2015-6240
HighSummary
The chroot, jail, and zone connection plugins in Ansible before version 1.9.2 allow local users to escape a restricted environment via a symlink attack.
Risk Assessment
Attackers may gain access to system resources that should be restricted, potentially leading to a security breach.
Recommendation
It is recommended to upgrade Ansible to version 1.9.2 or later to mitigate this vulnerability.
Other vulnerabilities in Ansible
See all- CVE-2014-3498High
The user module in Ansible before version 1.6.6 allows remote authenticated users to execute arbitrary commands.
- CVE-2024-8775Medium
Ansible has a flaw where sensitive information stored in Ansible Vault files can be exposed in plaintext during playbook execution. This occurs when using tasks like include_vars without the no_log: true parameter, causing sensitive data to be printed in output or logs.
Original NVD description (English source)
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.