CVE-2018-10874

HIGH

Ansible < 2.4.6.0 - Unauthenticated Remote Code Execution via Inventory Variable Injection

Title source: llm
STIX 2.1

Description

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.

References (11)

Core 11
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4072-1/
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2166
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2152
Issue Tracking, Vendor Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2150
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1041396
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHBA-2018:3788
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:0054
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2151
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2321
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2585

Scores

CVSS v3 7.8
EPSS 0.0049
EPSS Percentile 37.8%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20 CWE-426
Status published
Products (10)
pypi/ansible 0 - 2.4.6.0PyPI
redhat/ansible_engine 2.0
redhat/ansible_engine 2.4
redhat/ansible_engine 2.5
redhat/ansible_engine 2.6
redhat/openstack 10
redhat/openstack 12
redhat/openstack 13
redhat/virtualization 4.0
redhat/virtualization_host 4.0
Published Jul 02, 2018
Tracked Since Feb 18, 2026