CVE-2020-1737: red hat ansible
Vulnerability summary
CVE-2020-1737 is a high (CVSS 7.8) vulnerability in red hat ansible. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 30.3% of scored vulnerabilities.
Not severe (CVSS 7.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 12 · Related 7Timeline
- 09-03-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path traversal. This issue is fixed in 2.10.
CVSS metrics
8 scores · 6 sources · 3 versions- CVE.orgCNA7.5HighCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:HDiffers
- OSV · AlpineEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · PypiEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.36%
Chance of exploitation in the next 30 days
Percentile
30%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.36% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, user interaction (CVSS vector). Other conditions: not stated in public data.
Alpine2 products
- ansible< 2.8.9-r0 | < 2.9.6-r0 | < 2.7.17-r0
- ansible-base< 2.9.6-r0
Redhat2 products
- ansible_engine< 2.7.17 | ≥ 2.8.0, < 2.8.9 | ≥ 2.9.0, < 2.9.6
- ansible_tower≤ 3.3.4 | ≥ 3.4.0, ≤ 3.4.5 | ≥ 3.5.0, ≤ 3.5.5 | ≥ 3.6.0, ≤ 3.6.3
Debian1 product
- ansible< 2.9.7+dfsg-1
PyPI1 product
- ansible≥ 2.8.0a1, < 2.8.9 | ≥ 2.9.0a1, < 2.9.6 | < 2.7.17 | ≥ 2.9.0, < 2.9.6
Red hat1 product
- ansible2.7.17 and prior | 2.8.9 and prior | 2.9.6 and prior | fixed in 2.10
Ubuntu1 product
- ansibleAll versions (No fix recorded)
6 vendors · 8 products
References
25 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1737X Refsource CONFIRMWEBREPORTIssue TrackingVendor Advisory
Show all 25 references
- github.com/samdoran/ansiblePACKAGE
