CVE-2013-4259
CVE-2013-4259
This page contains facts from public vulnerability sources. Check the original advisory before updating.
runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in /tmp/.
CVSS 4.0 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ansible Debian:12
- Affected ranges
- ECOSYSTEM: < 1.3.4+dfsg-1
Update to 1.3.4+dfsg-1
ansible Debian:13
- Affected ranges
- ECOSYSTEM: < 1.3.4+dfsg-1
Update to 1.3.4+dfsg-1
ansible Debian:14
- Affected ranges
- ECOSYSTEM: < 1.3.4+dfsg-1
Update to 1.3.4+dfsg-1
ansible PyPI
- Versions
- 1.0
- 1.1
- 1.2
- 1.2.1
- 1.2.2
- Affected ranges
- ECOSYSTEM: < 1.2.3
Update to 1.2.3