CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.6. See the original NVD description below for full technical details.
CVE
CVE-2016-8628
Severity
HIGH
CVSS
7.6
EPSS
3.25%
Original NVD Description
Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.
Related CVEs
Other vulnerabilities affecting the same vendor(s)