Ansible Semaphore 漏洞

时间轴

版本

2.8.90	1
2.8.0	1
2.8.1	1
2.8.2	1
2.8.3	1

修正

Official Fix	1
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	1

易受攻击性

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	2

访问向量

Not Defined	0
Physical	0
Local	0
Adjacent	1
Network	1

身份验证

Not Defined	0
High	0
Low	1
None	1

用户交互

Not Defined	0
Required	0
None	2

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	2
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	2
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	2
≤8	0
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	1
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

供应商

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

零日攻击

<1k	0
<2k	2
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

本日攻击

<1k	2
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (81): 2.8, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5, 2.8.6, 2.8.7, 2.8.8, 2.8.9, 2.8.11, 2.8.12, 2.8.13, 2.8.14, 2.8.15, 2.8.16, 2.8.17, 2.8.18, 2.8.19, 2.8.21, 2.8.22, 2.8.23, 2.8.24, 2.8.25, 2.8.26, 2.8.27, 2.8.28, 2.8.29, 2.8.31, 2.8.32, 2.8.33, 2.8.34, 2.8.35, 2.8.36, 2.8.37, 2.8.38, 2.8.39, 2.8.41, 2.8.42, 2.8.43, 2.8.44, 2.8.45, 2.8.46, 2.8.47, 2.8.48, 2.8.49, 2.8.51, 2.8.52, 2.8.53, 2.8.54, 2.8.55, 2.8.56, 2.8.57, 2.8.58, 2.8.59, 2.8.61, 2.8.62, 2.8.63, 2.8.64, 2.8.65, 2.8.66, 2.8.67, 2.8.68, 2.8.69, 2.8.71, 2.8.72, 2.8.73, 2.8.74, 2.8.75, 2.8.76, 2.8.77, 2.8.78, 2.8.79, 2.8.81, 2.8.82, 2.8.83, 2.8.84, 2.8.85, 2.8.86, 2.8.87, 2.8.88

已发布	Base	Temp	漏洞	0day	今天	易	修正	CTI	CVE
2023-08-29	7.5	7.4	Ansible Semaphore Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-39059
2023-03-19	8.0	7.9	Ansible Semaphore auth.go 弱身份验证	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-28609

更多条目由 Ansible

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!