Security Advisory

CVE-2020-10691

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-04-30 16:23:36

Last updated 2024-08-04 11:06:11

Assigner redhat

State PUBLISHED

Description

An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file within the system.

← Browse all CVEs View on cve.org ↗