{
  "threat_severity" : "Moderate",
  "public_date" : "2018-06-29T00:00:00Z",
  "bugzilla" : {
    "description" : "ansible: ansible.cfg is being read from current working directory allowing possible code execution",
    "id" : "1596533",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1596533"
  },
  "cvss3" : {
    "cvss3_base_score" : "7.8",
    "cvss3_scoring_vector" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-426",
  "details" : [ "A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.", "It was found that ansible.cfg is being read from the current working directory, which can be made to point to plugin or module paths that are under control of the attacker. This could allow an attacker to execute arbitrary code." ],
  "statement" : "Red Hat Gluster Storage 3 and Red Hat Ceph Storage 3 ships the affected version of ansible, but they no longer maintain their own version of ansible. Both the products will consume fixes directly from ansible repository.",
  "acknowledgement" : "This issue was discovered by Brian Coca (Red Hat).",
  "affected_release" : [ {
    "product_name" : "Red Hat Ansible Engine 2.4 for RHEL 7",
    "release_date" : "2018-07-10T00:00:00Z",
    "advisory" : "RHSA-2018:2152",
    "cpe" : "cpe:/a:redhat:ansible_engine:2.4::el7",
    "package" : "ansible-0:2.4.6.0-1.el7ae"
  }, {
    "product_name" : "Red Hat Ansible Engine 2.5 for RHEL 7",
    "release_date" : "2018-07-10T00:00:00Z",
    "advisory" : "RHSA-2018:2150",
    "cpe" : "cpe:/a:redhat:ansible_engine:2.5::el7",
    "package" : "ansible-0:2.5.6-1.el7ae"
  }, {
    "product_name" : "Red Hat Ansible Engine 2.6 for RHEL 7",
    "release_date" : "2018-07-10T00:00:00Z",
    "advisory" : "RHSA-2018:2166",
    "cpe" : "cpe:/a:redhat:ansible_engine:2.6::el7",
    "package" : "ansible-0:2.6.1-1.el7ae"
  }, {
    "product_name" : "Red Hat Ansible Engine 2 for RHEL 7",
    "release_date" : "2018-07-10T00:00:00Z",
    "advisory" : "RHSA-2018:2151",
    "cpe" : "cpe:/a:redhat:ansible_engine:2::el7",
    "package" : "ansible-0:2.6.1-1.el7ae"
  }, {
    "product_name" : "Red Hat OpenStack Platform 10.0 (Newton)",
    "release_date" : "2019-01-16T00:00:00Z",
    "advisory" : "RHSA-2019:0054",
    "cpe" : "cpe:/a:redhat:openstack:10::el7",
    "package" : "ansible-0:2.4.6.0-1.el7ae"
  }, {
    "product_name" : "Red Hat OpenStack Platform 12.0 (Pike)",
    "release_date" : "2018-12-05T00:00:00Z",
    "advisory" : "RHBA-2018:3788",
    "cpe" : "cpe:/a:redhat:openstack:12::el7",
    "package" : "ansible-0:2.4.6.0-1.el7ae"
  }, {
    "product_name" : "Red Hat OpenStack Platform 12.0 (Pike)",
    "release_date" : "2018-12-05T00:00:00Z",
    "advisory" : "RHBA-2018:3788",
    "cpe" : "cpe:/a:redhat:openstack:12::el7",
    "package" : "ansible-role-redhat-subscription-0:1.0.1-4.el7ost"
  }, {
    "product_name" : "Red Hat OpenStack Platform 13.0 (Queens)",
    "release_date" : "2018-08-29T00:00:00Z",
    "advisory" : "RHSA-2018:2585",
    "cpe" : "cpe:/a:redhat:openstack:13::el7",
    "package" : "ansible-0:2.4.6.0-1.el7ae"
  }, {
    "product_name" : "Red Hat Virtualization 4 for Red Hat Enterprise Linux 7",
    "release_date" : "2018-07-31T00:00:00Z",
    "advisory" : "RHSA-2018:2321",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7::hypervisor",
    "package" : "imgbased-0:1.0.22-1.el7ev"
  }, {
    "product_name" : "Red Hat Virtualization 4 for Red Hat Enterprise Linux 7",
    "release_date" : "2018-07-31T00:00:00Z",
    "advisory" : "RHSA-2018:2321",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7::hypervisor",
    "package" : "redhat-release-virtualization-host-0:4.2-5.0.el7"
  }, {
    "product_name" : "Red Hat Virtualization 4 for Red Hat Enterprise Linux 7",
    "release_date" : "2018-07-31T00:00:00Z",
    "advisory" : "RHSA-2018:2321",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7::hypervisor",
    "package" : "redhat-virtualization-host-0:4.2-20180724.0"
  } ],
  "package_state" : [ {
    "product_name" : "CloudForms Management Engine 5",
    "fix_state" : "Not affected",
    "package_name" : "ansible",
    "cpe" : "cpe:/a:redhat:cloudforms_managementengine:5"
  }, {
    "product_name" : "Red Hat Ceph Storage 2",
    "fix_state" : "Will not fix",
    "package_name" : "ansible",
    "cpe" : "cpe:/a:redhat:ceph_storage:2"
  }, {
    "product_name" : "Red Hat Ceph Storage 3",
    "fix_state" : "Will not fix",
    "package_name" : "ansible",
    "cpe" : "cpe:/a:redhat:ceph_storage:3"
  }, {
    "product_name" : "Red Hat OpenShift Enterprise 3",
    "fix_state" : "Will not fix",
    "package_name" : "ansible",
    "cpe" : "cpe:/a:redhat:openshift:3"
  }, {
    "product_name" : "Red Hat OpenStack Platform 14 (Rocky)",
    "fix_state" : "Not affected",
    "package_name" : "ansible",
    "cpe" : "cpe:/a:redhat:openstack:14"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Not affected",
    "package_name" : "ansible",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Storage 3",
    "fix_state" : "Will not fix",
    "package_name" : "ansible",
    "cpe" : "cpe:/a:redhat:storage:3"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2018-10875\nhttps://nvd.nist.gov/vuln/detail/CVE-2018-10875" ],
  "name" : "CVE-2018-10875",
  "csaw" : false
}