CVE-2014-4658

The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain…

published February 20, 2020

CVSS
—
EPSS
0%
Percentile
34.8
In the wild
Unconfirmed
What it is

The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00418 · 34.8th percentile
Published
2020-02-20T14:30Z
EPSS history
Timeline
  • 20 FEB 14:30Z
    The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain…
    cvelistv5