CVE-2020-1736

CWE-732 — Incorrect Permission Assignment11 documents7 sources
Severity
3.3LOW
EPSS
0.0%
top 86.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Redhat AnsibleRedhat Ansible TowerRED HAT Ansible+3 more
Timeline
PublishedMar 16
Latest updateFeb 9

Description

A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions before the move. This could lead to the disclosure of sensitive data. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:NExploitability: 0.8 | Impact: 1.4

Affected Packages6 packages

▶NVDredhat/ansible2.8.0 — 2.8.15+2
▶PyPIansible2.7.0 — 2.10.0
▶NVDredhat/ansible_tower3.3.5 — 3.4.5+4
▶CVEListV5red_hat/ansible2.7.x, 2.8.x, 2.9.x

Also affects: Fedora 31, 32

🔴Vulnerability Details

4
GHSA
Incorrect Permission Assignment for Critical Resource in Ansible↗2022-02-09
▶
OSV
Incorrect Permission Assignment for Critical Resource in Ansible↗2022-02-09
▶
CVEList
CVE-2020-1736: A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified↗2020-03-16
▶
OSV
CVE-2020-1736: A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified↗2020-03-16
▶

📋Vendor Advisories

2
Red Hat
ansible: atomic_move primitive sets permissive permissions↗2020-02-18
▶
Debian
CVE-2020-1736: ansible - A flaw was found in Ansible Engine when a file is moved using atomic_move primit...↗2020
▶

💬Community

4
Bugzilla
CVE-2020-1736 ansible: atomic_move primitive sets permissive permissions [openstack-rdo]↗2020-02-27
▶
Bugzilla
CVE-2020-1736 ansible: atomic_move primitive sets permissive permissions [fedora-all]↗2020-02-20
▶
Bugzilla
CVE-2020-1736 ansible: atomic_move primitive sets permissive permissions [epel-all]↗2020-02-20
▶
Bugzilla
CVE-2020-1736 ansible: atomic_move primitive sets permissive permissions↗2020-02-12
▶