FreeBSD : ansible - Vault password leak from temporary file (ae2e7871-80f6-11ea-bafd-815569f3852d)

medium Nessus Plugin ID 135731

Language:

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

Borja Tarraso reports :

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes 'ansible-vault edit', another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.

Solution

Update the affected packages.

Plugin Details

Severity: Medium

ID: 135731

File Name: freebsd_pkg_ae2e787180f611eabafd815569f3852d.nasl

Version: 1.5

Type: local

Family: FreeBSD Local Security Checks

Published: 4/20/2020

Updated: 3/15/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Low

Base Score: 1.9

Temporal Score: 1.4

Vector: CVSS2#AV:L/AC:M/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2020-1740

CVSS v3

Risk Factor: Medium

Base Score: 4.7

Temporal Score: 4.1

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:ansible, p-cpe:/a:freebsd:freebsd:ansible23, p-cpe:/a:freebsd:freebsd:ansible24, p-cpe:/a:freebsd:freebsd:ansible25, p-cpe:/a:freebsd:freebsd:ansible26, p-cpe:/a:freebsd:freebsd:ansible27, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Exploit Ease: No known exploits are available

Patch Publication Date: 4/17/2020

Vulnerability Publication Date: 2/12/2020

Reference Information

CVE: CVE-2020-1740

IAVB: 2019-B-0092-S

Detections

Analytics