CVE-2020-1738

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-1738
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-1738.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-1738
Aliases
Downstream
Related
Published
2020-03-16T16:15:14.093Z
Modified
2026-05-15T12:04:05.162664416Z
Severity
  • 3.9 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L CVSS Calculator
Summary
[none]
Details

A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "vendor_product": "redhat:ansible_tower",
            "extracted_events": [
                {
                    "last_affected": "3.3.4"
                },
                {
                    "introduced": "3.3.5"
                },
                {
                    "last_affected": "3.4.5"
                },
                {
                    "introduced": "3.5.0"
                },
                {
                    "last_affected": "3.5.5"
                },
                {
                    "introduced": "3.6.0"
                },
                {
                    "last_affected": "3.6.3"
                }
            ],
            "cpes": [
                "cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*"
            ]
        },
        {
            "source": "CPE_FIELD",
            "vendor_product": "redhat:cloudforms_management_engine",
            "extracted_events": [
                {
                    "last_affected": "5.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:redhat:cloudforms_management_engine:5.0:*:*:*:*:*:*:*"
            ]
        },
        {
            "source": "CPE_FIELD",
            "vendor_product": "redhat:openstack",
            "extracted_events": [
                {
                    "last_affected": "13"
                }
            ],
            "cpes": [
                "cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*"
            ]
        }
    ]
}
References

Affected packages