CVE-2014-4658
Fixed in a distro release EPSS <1%
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
Products: redhat ansible
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | ansible | 1.5.5 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ansible | 1.5.5+dfsg-1 |
| Debian 13 | ansible | 1.5.5+dfsg-1 |
| Debian 14 | ansible | 1.5.5+dfsg-1 |
| Ubuntu Pro 14.04 LTS | ansible | 1.5.4+dfsg-1ubuntu0.1~esm2 |