CVE-2017-7481
Critical
Description
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Redhat Ansible Engine
PublishedJul 19, 2018
First seenJul 19, 2018
Weakness typeCWE-20Improper input validation
How to fix
Update
- redhat ansible_engine2.3.1.0, 2.4.0.0 or later
- ansible2.3.1.0, 2.1.6.0, 2.2.3.0, 2.4.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat ansible_engine | v < 2.3.1.0, 2.3.2.0 ≤ v < 2.4.0.0 | 2.3.1.0, 2.4.0.0 |
| redhat openshift_container_platform | 3.3, 3.4, 3.5 | — |
| redhat openstack | 10, 11 | — |
| redhat storage_console | 2.0 | — |
| redhat virtualization | 4.1 | — |
| redhat virtualization_manager | 4.1 | — |
| redhat gluster_storage | 3.2 | — |
| canonical ubuntu_linux | 16.04, 18.04, 19.04 | — |
| debian debian_linux | 9.0 | — |
| ansiblePyPI | 2.3.0.0 ≤ v < 2.3.1.0, v < 2.1.6.0, 2.2.0.0 ≤ v < 2.2.3.0, v < 2.3.1.0, 2.3.2.0 ≤ v < 2.4.0.0 | 2.3.1.0, 2.1.6.0, 2.2.3.0, 2.4.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.