[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2018-10875":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":44,"references":57,"score":83,"epss_score":84,"epss_percentile":85,"is_kev":19,"cisa_kev_date_added":86,"cisa_kev_due_date":86,"cisa_ssvc":87,"attack_mappings":93,"exploits":116},225705,"CVE-2018-10875","EUVD-2018-0016","Ansible Arbitrary Code Execution\n\nA flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.","2022-05-13T01:07:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":18,"confidentialityImpact":15},"UNCHANGED","3.1",7.8,"LOCAL","HIGH","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE","LOW",false,[21],"CWE-426",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"cpe:2.3:a:redhat:ansible_engine:2.0:*:*:*:*:*:*:*","cpe:2.3:a:suse:package_hub:-:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:a:redhat:ansible_engine:2.6:*:*:*:*:*:*:*","cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gluster_storage:3.0.0:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*","cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*","cpe:2.3:a:redhat:ansible_engine:2.4:*:*:*:*:*:*:*","cpe:2.3:a:redhat:ansible_engine:2.5:*:*:*:*:*:*:*","cpe:2.3:a:redhat:ceph_storage:2.0:*:*:*:*:*:*:*","cpe:2.3:a:ansible:ansible:*:*:*:*:*:*:*:*",[45,46,47,48,49,50,51,52,53,54,55,56],"Redhat Ansible Engine","Redhat Gluster Storage","Redhat Virtualization","Redhat Virtualization Host","Redhat Openshift","Redhat Ceph Storage","Redhat Openstack","Suse Package Hub","Canonical Ubuntu Linux","Debian Debian Linux","Suse Suse Linux Enterprise Server","Ansible Ansible",[58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82],"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-04\u002Fmsg00021.html","http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041396","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHBA-2018:3788","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2150","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2151","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2152","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2166","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2321","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2585","https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0054","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2018-10875","https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F09\u002Fmsg00016.html","https:\u002F\u002Fusn.ubuntu.com\u002F4072-1\u002F","https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2019\u002Fdsa-4396","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2018-10875","https:\u002F\u002Fgithub.com\u002Fansible\u002Fansible\u002Fissues\u002F42388","https:\u002F\u002Fgithub.com\u002Fansible\u002Fansible\u002Fpull\u002F43583","https:\u002F\u002Fgithub.com\u002Fansible\u002Fansible\u002Fpull\u002F42070","https:\u002F\u002Fgithub.com\u002Fansible\u002Fansible\u002Fcommit\u002Fff980afefdbe4ceb828bdb1bb2eef03cf616bf63","https:\u002F\u002Fgithub.com\u002Fansible\u002Fansible\u002Fcommit\u002F4cecbe81adbc655d7ab734165d3ac539f8ba5981","https:\u002F\u002Fgithub.com\u002Fansible\u002Fansible\u002Fcommit\u002Ff32c42c37aaf7b9db93ea3151b2f42a0c4bd8172","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20201130165946\u002Fhttp:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041396","https:\u002F\u002Fusn.ubuntu.com\u002F4072-1","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fansible\u002FPYSEC-2018-43.yaml","https:\u002F\u002Fgithub.com\u002Fansible\u002Fansible",0.39,0.00592,0.48012,null,{"timestamp":86,"automatable":88,"tech_impact":89,"exploitation":90,"cisa_decision":91,"cisa_remediation_timeline":92},"no","partial","none",{},"FSU",[94,100,110],{"name":95,"source":96,"tactics":97,"technique_id":99},"Exploitation for Privilege Escalation","attack_vector",[98],"privilege-escalation","T1068",{"name":101,"source":102,"cwe_ids":103,"tactics":104,"capec_ids":107,"technique_id":109},"Path Interception by PATH Environment Variable","capec",[21],[105,106],"execution","stealth",[108],"CAPEC-38","T1574.007",{"name":111,"source":102,"cwe_ids":112,"tactics":113,"capec_ids":114,"technique_id":115},"Path Interception by Unquoted Path",[21],[105,106],[108],"T1574.009",[]]