{"id":"CVE-2018-10874","published":"2018-07-02T13:00:00Z","modified":"2024-08-05T07:46:47Z","title":"In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command…","vendor":null,"product":"ansible","tier":"tail","description":{"text":"In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.8,"severity":"HIGH","version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00489,"percentile":0.42133,"provenance":"source"},"cwes":[{"id":"CWE-426","name":"Untrusted Search Path"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:2166","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2152","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2150","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securitytracker.com/id/1041396","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://access.redhat.com/errata/RHBA-2018:3788","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0054","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2151","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2321","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2585","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://usn.ubuntu.com/4072-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]}],"priority":{"score":13.9,"factors":[{"name":"EPSS percentile","points":8.43},{"name":"CVSS severity","points":5.46}]},"affected":[{"ecosystem":"PyPI","package":"ansible","vulnerableRanges":["<2.4.6.0",">=2.5, <2.5.6",">=2.6, <2.6.1"],"patched":["2.4.6.0","2.5.6","2.6.1"],"from":["GHSA-3xvg-x47j-x75w","PYSEC-2018-81"],"provenance":"source"}],"euvd":{"id":"EUVD-2018-0020","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2017-7481","published":"2018-07-19","fixed":"2.4.0.0","kev":false},{"cve":"CVE-2017-7550","published":"2017-11-21","fixed":"2.4.1.0","kev":false},{"cve":"CVE-2018-10855","published":"2018-07-02","fixed":"2.5.5","kev":false,"link":{"from":"CVE-2018-10855","to":"CVE-2018-10874","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:ansible","fromFixed":"2.4.5.0","toFixed":"2.4.6.0","daysApart":0}]}},{"cve":"CVE-2018-10874","published":"2018-07-02","fixed":"2.6.1","kev":false},{"cve":"CVE-2018-10875","published":"2018-07-13","fixed":"2.6.1","kev":false},{"cve":"CVE-2018-16837","published":"2018-10-23","fixed":"2.7.1","kev":false},{"cve":"CVE-2018-16876","published":"2019-01-03","fixed":"2.7.5","kev":false}],"package":"PyPI:ansible"}}