VDB
CNVD-2020-19222
CNVD-2020-19222
PUBLISHED
CVSS 7.900000095367432 HIGH
Ansible是美国Ansible公司的一款计算机系统配置管理器。该产品可用于发布、管理和编排计算机系统。 Ansible Engine中存在安全漏洞。攻击者可利用该漏洞提升权限或注入代码。
Risk Scores
CVSS v3.1
7.900000095367432
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Ansible | all Ansible 2.8.x versions prior to 2.8.9, *, * |
Timeline
- Feb 18, 2020 CVE Published
- Apr 16, 2026 Distribution Patch
- Apr 16, 2026 Security Advisory
- Apr 16, 2026 Security Advisory
References
- FEDORA-2020-1b6ce91e37 vendor-advisory
- FEDORA-2020-3990f03ba3 vendor-advisory
- FEDORA-2020-f80154b5b4 vendor-advisory
- GLSA-202006-11 vendor-advisory
- DSA-4950 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10684 url