Home

CVE-2016-8614

Description

A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.079

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2016-8614,CVE-2016-8628 are fixed in Python-ansible 2.2.0.0Windows
Vulnerabilities CVE-2016-8614,CVE-2016-8628 are fixed in Python-ansible for linux 2.2.0.0Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234