Ansible Vault

Source repositories

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2017-2809	Ansible Vault Project Ansible Vault	Hig	0.42	7.5	0.03		Sep 14, 2017	An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.

CVE-2017-2809HigSep 14, 2017
Ansible Vault Project
Ansible Vault
risk 0.42cvss 7.5epss 0.03
An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.