CVE-2021-3701

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate user in a place they did not expect. The highest threat from this vulnerability is to confidentiality and integrity.

• CWE-276
• CWE-276

• https://access.redhat.com/security/cve/CVE-2021-3701Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1977959Issue Tracking, Patch, Vendor Advisory
• https://github.com/ansible/ansible-runner/issues/738Issue Tracking, Third Party Advisory
• https://github.com/ansible/ansible-runner/pull/742/commitsPatch, Third Party Advisory
• https://access.redhat.com/security/cve/CVE-2021-3701Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1977959Issue Tracking, Patch, Vendor Advisory
• https://github.com/ansible/ansible-runner/issues/738Issue Tracking, Third Party Advisory
• https://github.com/ansible/ansible-runner/pull/742/commitsPatch, Third Party Advisory

Published

Aug 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37004There is a Improper Input Validation vulnerability in Huawei…7.5
• CVE-2021-37005There is a Improper Input Validation vulnerability in Huawei…7.5
• CVE-2021-37006There is a Improper Preservation of Permissions vulnerabilit…7.5
• CVE-2021-37007There is a Out-of-bounds Read vulnerability in Huawei Smartp…7.5
• CVE-2021-37008There is a Improper Input Validation vulnerability in Huawei…7.5
• CVE-2021-37009There is a Configuration vulnerability in Huawei Smartphone.…7.5
• CVE-2021-37010There is a Exposure of Sensitive Information to an Unauthori…7.5
• CVE-2021-37011There is a Stack-based Buffer Overflow vulnerability in Huaw…9.1
• CVE-2021-37012There is a Data Processing Errors vulnerability in Huawei Sm…7.5
• CVE-2021-37013There is a Improper Input Validation vulnerability in Huawei…5.3
• CVE-2021-37014There is a Stack-based Buffer Overflow vulnerability in Huaw…7.5
• CVE-2021-37015There is a Out-of-bounds Read vulnerability in Huawei Smartp…7.5