Vulnetix
Try Vulnetix Request Demo
CVE-2020-10744 PUBLISHED

An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. Ansible Engine 2.7.18, 2.8.12, and 2.9.9 as well as previous versions are affected and Ansible Tower 3.4.5, 3.5.6 and 3.6.4 as well as previous versions are affected.

EPSS 0.04% · 11.4th percentile

Risk Scores

EPSS Score
0.04%
11.4th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:20.04:LTSansible2.9.6+dfsg-1, 2.9.4+dfsg-1, 2.9.2+dfsg-1
Ubuntu:Pro:16.04:LTSansible2.0.0.2-2ubuntu1.2, 2.0.0.2-2ubuntu1.3, 0
Ubuntu:Pro:18.04:LTSansible2.5.1+dfsg-1ubuntu0.1, 2.5.1+dfsg-1, 2.5.0+dfsg-1

Timeline

References

Open in Interactive Console →