Low severityNVD Advisory· Published Sep 16, 2013· Updated Jun 16, 2026
CVE-2013-4259
CVE-2013-4259
Description
runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in /tmp/.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
ansiblePyPI | < 1.2.3 | 1.2.3 |
Affected products
2Patches
Vulnerability mechanics
References
7- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchWEB
- www.ansible.com/securitynvdVendor AdvisoryWEB
- github.com/advisories/GHSA-fj24-ghp9-39v3ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2013-4259ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2013-1.yamlghsaWEB
- groups.google.com/forum/ghsaWEB
- groups.google.com/forum/nvdWEB
News mentions
0No linked articles in our index yet.