Ansible Vault
Approved changes feed: RSS · Atom
cpe:2.3:a:ansible-vault_project:ansible-vault:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ansible Vault Project (4fa5435c-b478-579b-9b32-ab34a2a351b0) |
|---|---|
| Product | Ansible Vault (bd616de8-c3ac-5d73-8190-707c55c6b3f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/tomoh1r/ansible-vault |
purl2cpe | 2026-06-01 10:14:22.486762 |
pkg:pypi/ansible-vault |
purl2cpe | 2026-06-01 10:14:22.486765 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-2809 |
vulnerable | 2026-06-08 05:09:26.000808 |
Details available
HIGH (7.5)
An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this vulnerability.
Published: 2017-09-14T19:00:00.000Z
Updated: 2024-09-16T20:53:03.863Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.