Vulnerability Description
A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Ansible | < 2.7.17 |
| Redhat | Ansible Tower | <= 3.3.4 |
| Redhat | Cloudforms Management Engine | 5.0 |
| Redhat | Openstack | 13 |
| Debian | Debian Linux | 8.0 |
| Fedoraproject | Fedora | 30 |
Related Weaknesses (CWE)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740Issue TrackingVendor Advisory
- https://github.com/ansible/ansible/issues/67798Issue TrackingThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/05/msg00005.htmlMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://security.gentoo.org/glsa/202006-11Third Party Advisory
- https://www.debian.org/security/2021/dsa-4950Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740Issue TrackingVendor Advisory
- https://github.com/ansible/ansible/issues/67798Issue TrackingThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/05/msg00005.htmlMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://security.gentoo.org/glsa/202006-11Third Party Advisory
FAQ
What is CVE-2020-1740?
CVE-2020-1740 is a vulnerability with a CVSS score of 3.9 (LOW). A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, a...
How severe is CVE-2020-1740?
CVE-2020-1740 has been rated LOW with a CVSS base score of 3.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-1740?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Ansible, Redhat Ansible Tower, Redhat Cloudforms Management Engine, Redhat Openstack, Debian Debian Linux.