VYPR
← All advisories
Low severityNVD Advisory· Published May 15, 2020· Updated Aug 4, 2024

CVE-2020-10744

CVE-2020-10744

Description

An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. Ansible Engine 2.7.18, 2.8.12, and 2.9.9 as well as previous versions are affected and Ansible Tower 3.4.5, 3.5.6 and 3.6.4 as well as previous versions are affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
ansiblePyPI
>= 2.10.0a1, < 2.10.0rc12.10.0rc1
ansiblePyPI
< 2.9.122.9.12

Affected products

195

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.