Authentication Bypass by Primary Weakness Affecting ansible package, versions *


Severity

Recommended
low

Based on Red Hat Enterprise Linux security rating.

Threat Intelligence

EPSS
0.25% (66th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL7-ANSIBLE-3374896
  • published26 Jul 2021
  • disclosed7 Sept 2018

Introduced: 7 Sep 2018

CVE-2018-1000805  (opens in a new tab)
CWE-305  (opens in a new tab)

How to fix?

There is no fixed version for RHEL:7 ansible.

NVD Description

Note: Versions mentioned in the description apply only to the upstream ansible package and not the ansible package as distributed by RHEL. See How to fix? for RHEL:7 relevant fixed versions and status.

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.

CVSS Scores

version 3.1