Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2013-4259

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-fj24-ghp9-39v3

Ansible uses a socket with predictable filename in /tmp `runner/connection_plugins/ssh.py` in Ansible before 1.2.3, when using `ControlPersist`, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in `/tmp/`.

gitlab/pypi/ansible/CVE-2013-4259

Ansible uses a socket with predictable filename in /tmp runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in /tmp/.