Strix
26.1K

CVE-2020-1740

MEDIUMCVSS 4.7/10EPSS 0.37%

Last modified

CVE-2020-1740 is a medium-severity vulnerability rated 4.7/10 on the CVSS scale. A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. EPSS estimates a 0.37% chance of exploitation in the next 30 days.

Description

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.

Metrics

CVSS 3.1
4.7/10

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
0.37%

29.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
RedhatAnsible< 2.7.17
RedhatAnsible>= 2.8.0, < 2.8.11
RedhatAnsible>= 2.9.0, < 2.9.7
RedhatAnsible Tower<= 3.3.4
RedhatAnsible Tower>= 3.3.5, <= 3.4.5
RedhatAnsible Tower>= 3.5.0, <= 3.5.5
RedhatAnsible Tower>= 3.6.0, <= 3.6.3
RedhatCloudforms Management Engine5.0
RedhatOpenstack13
DebianDebian Linux8.0
DebianDebian Linux10.0
FedoraprojectFedora30
FedoraprojectFedora31
FedoraprojectFedora32

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2020-1740?
A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
How severe is CVE-2020-1740?
CVE-2020-1740 has a CVSS score of 4.7/10 (MEDIUM severity). The EPSS model estimates a 0.37% probability of exploitation in the next 30 days.
How do I fix CVE-2020-1740?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-1740?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST