VDB
KO
—

PYSEC-2020-7

Details

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / ansible
Introduced in: 0 Fixed in: 2.7.17
Fix pip install --upgrade 'ansible>=2.7.17'

References