Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2020-10691
An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file within the system.
| Software | From | Fixed in |
|---|---|---|
| redhat / ansible_engine | 2.9.0 | 2.9.7 |
| redhat / ansible_tower | 3.0 | 3.0.x |
ansible
|
2.9.0 | 2.9.7 |