CVE-2020-1734

moderate-risk
Published 2020-03-03

A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitrary commands by overwriting the ansible facts.

Do I need to act?

-
0.13% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.4/10 High
LOCAL / HIGH complexity

Affected Products (7)

Affected Vendors

Redhat

References (4)

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1734
Third Party Advisory https://github.com/ansible/ansible/issues/67792
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1734
Third Party Advisory https://github.com/ansible/ansible/issues/67792
34
/ 100
moderate-risk
Severity 19/34 · Moderate
Exploitability 1/34 · Minimal
Exposure 14/34 · Moderate