CVE-2018-10874

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.

Published: Jul 2, 2018
Updated: May 9, 2024
CVE: CVE-2018-10874
GHSA: GHSA-3xvg-x47j-x75w
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: Low
Score: 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-20
CWE-426

Affected Software
References

Software	From	Fixed in
redhat / virtualization_host	4.0	4.0.x
redhat / virtualization	4.0	4.0.x
redhat / ansible_engine	2.5	2.5.x
redhat / ansible_engine	2.0	2.0.x
redhat / ansible_engine	2.4	2.4.x
redhat / ansible_engine	2.6	2.6.x
redhat / openstack	10	10.x
redhat / openstack	12	12.x
redhat / openstack	13	13.x
ansible	-	2.5.6

http://www.securitytracker.com/id/1041396
https://access.redhat.com/errata/RHBA-2018:3788
https://access.redhat.com/errata/RHSA-2018:2150
https://access.redhat.com/errata/RHSA-2018:2151
https://access.redhat.com/errata/RHSA-2018:2152
https://access.redhat.com/errata/RHSA-2018:2166
https://access.redhat.com/errata/RHSA-2018:2321
https://access.redhat.com/errata/RHSA-2018:2585
https://access.redhat.com/errata/RHSA-2019:0054
https://access.redhat.com/security/cve/CVE-2018-10874
https://bugzilla.redhat.com/show_bug.cgi?id=1596528
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874
https://usn.ubuntu.com/4072-1/
https://web.archive.org/web/20201130165946/http://www.securitytracker.com/id/1041396

Vulnerability Database

CVE-2018-10874

Deep Security Visibility Without the Complexity