CVE-2016-8614CWE-358

A flaw was found in Ansible before version 2.2.0

Medium · published July 31, 2018

CVSS v3.0
6.3
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.02458 · 84.2th percentile
Weakness
CWE-358 · Improperly Implemented Security Check for Standard
Published
2018-07-31T21:00Z
EPSS history
Timeline
  • 31 JUL 21:00Z
    A flaw was found in Ansible before version 2.2.0
    cvelistv5