← All advisories

High severityNVD Advisory· Published Jan 9, 2020· Updated Aug 6, 2024

CVE-2014-2686

CVE-2014-2686

Description

Ansible prior to 1.5.4 mishandles the evaluation of some strings.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ansiblePyPI	< 1.5.4	1.5.4

Affected products

2

Ansible/Ansibledescription
ghsa-coords
pkg:pypi/ansible
Range: < 1.5.4

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-49m5-2838-q2rvghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-2686ghsaADVISORY
github.com/ansible/ansible/commit/998793fd0ab55705d57527a38cee5e83f535974cghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-198.yamlghsaWEB
groups.google.com/forum/ghsaWEB
groups.google.com/forum/mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.