CVE-2020-1735

Published: Mar 16, 2020Modified: Jun 17, 2026

4.6

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Exploitability: 1.5 / Impact: 2.7

Source: NVD

Description

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.

Affected (13)

Products: Redhat: Ansible, Ansible Tower, Cloudforms Management Engine, Openstack · Debian: Debian Linux · Fedoraproject: Fedora

4 products

Cloudforms Management Engine

1 product

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Redhat Ansible	Before 2.7.17
Redhat Ansible	From 2.8.0 to 2.8.11
Redhat Ansible	From 2.9.0 to 2.9.7
Redhat Ansible Tower	Up to 3.3.4
Redhat Ansible Tower	From 3.3.5 to 3.4.5
Redhat Ansible Tower	From 3.5.0 to 3.5.5
Redhat Ansible Tower	From 3.6.0 to 3.6.3
Redhat Cloudforms Management Engine	Version 5.0
Redhat Openstack	Version 13

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 30
Fedoraproject Fedora	Version 31
Fedoraproject Fedora	Version 32

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (14)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1735

Source: secalert@redhat.com

Issue TrackingVendor Advisory

https://github.com/ansible/ansible/issues/67793

Source: secalert@redhat.com

ExploitIssue TrackingPatchThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/

Source: secalert@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/

Source: secalert@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/

Source: secalert@redhat.com

https://security.gentoo.org/glsa/202006-11

Source: secalert@redhat.com

Third Party Advisory

https://www.debian.org/security/2021/dsa-4950

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1735

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

https://github.com/ansible/ansible/issues/67793

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202006-11

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2021/dsa-4950

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.