Vulnerability · Published Aug 23, 2022 · Assigned by redhat

CVE-2021-3701

Medium 6.6

In plain English

A medium-severity incorrect default permissions in ansible-runner. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)6.6Medium

Exploit odds (30 days)0.3%top 78.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate user in a place they did not expect. The highest threat from this vulnerability is to confidentiality and integrity.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	ansible-runner	2.1.1-1	DEBIAN-CVE-2021-3701
Debian:13	ansible-runner	2.1.1-1	DEBIAN-CVE-2021-3701
Debian:14	ansible-runner	2.1.1-1	DEBIAN-CVE-2021-3701
PyPI	ansible-runner	2.1.0	GHSA-wwch-cmqr-hhrm
PyPI	ansible-runner	2.1.0	PYSEC-2022-43067

Affected products (as reported)

Vendor	Product	Versions
n/a	ansible-runner	Affects ansible-runner 2.0

Weakness: CWE-276

References

https://bugzilla.redhat.com/show_bug.cgi?id=1977959 x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2021-3701 x_refsource_MISC
https://github.com/ansible/ansible-runner/issues/738 x_refsource_MISC
https://github.com/ansible/ansible-runner/pull/742/commits x_refsource_MISC