Red Hat Ansible Engine up to 2.7.15/2.8.7/2.9.2 nxos_file_copy filename input validation

Summaryinfo

A vulnerability labeled as critical has been found in Red Hat Ansible Engine up to 2.7.15/2.8.7/2.9.2. The impacted element is an unknown function of the component nxos_file_copy Module. Such manipulation of the argument filename as part of Parameter leads to input validation. This vulnerability is documented as CVE-2019-14905. The attack needs to be performed locally. There is not any exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Red Hat Ansible Engine up to 2.7.15/2.8.7/2.9.2 and classified as critical. Affected by this issue is an unknown part of the component nxos_file_copy Module. The manipulation of the argument filename as part of a Parameter leads to a input validation vulnerability. Using CWE to declare the problem leads to CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Impacted is confidentiality, integrity, and availability. CVE summarizes:

A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues.

The weakness was released 03/31/2020 (Website). The advisory is shared for download at lists.fedoraproject.org. This vulnerability is handled as CVE-2019-14905 since 08/10/2019. The attack needs to be approached locally. The exploitation needs additional levels of successful authentication. There are known technical details, but no exploit is available.

Upgrading to version 2.7.16, 2.8.8 or 2.9.3 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Red Hat

Name

• Ansible Engine

Version

• 2.7.0
• 2.7.1
• 2.7.2
• 2.7.3
• 2.7.4
• 2.7.5
• 2.7.6
• 2.7.7
• 2.7.8
• 2.7.9
• 2.7.10
• 2.7.11
• 2.7.12
• 2.7.13
• 2.7.14
• 2.7.15
• 2.8.0
• 2.8.1
• 2.8.2
• 2.8.3
• 2.8.4
• 2.8.5
• 2.8.6
• 2.8.7
• 2.9.0
• 2.9.1
• 2.9.2

License

• open-source

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion