cbcvebase.
CVE-2020-1737
published 2020-03-09

CVE-2020-1737: A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the…

PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.36%
28.5th percentile
A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path traversal. This issue is fixed in 2.10.

Affected

19 ranges
VendorProductVersion rangeFixed in
debianansible< ansible 2.9.7+dfsg-1 (bookworm)ansible 2.9.7+dfsg-1 (bookworm)
red_hatansible
red_hatansible
red_hatansible
red_hatansible
redhatansible>= 0 < 2.9.7+dfsg-12.9.7+dfsg-1
redhatansible>= 0 < 2.9.7+dfsg-12.9.7+dfsg-1
redhatansible>= 0 < 2.9.7+dfsg-12.9.7+dfsg-1
redhatansible>= 0 < 2.9.7+dfsg-12.9.7+dfsg-1
redhatansible>= 0 < 2.7.172.7.17
redhatansible>= 2.8.0a1 < 2.8.92.8.9
redhatansible>= 2.9.0a1 < 2.9.62.9.6
redhatansible_engine< 2.7.172.7.17
redhatansible_engine>= 2.8.0 < 2.8.92.8.9
redhatansible_engine>= 2.9.0 < 2.9.62.9.6
redhatansible_tower<= 3.3.4
redhatansible_tower3.4.0 – 3.4.5
redhatansible_tower3.5.0 – 3.5.5
redhatansible_tower3.6.0 – 3.6.3

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
osv7.8HIGH
vendor_debian7.5LOW
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.