Ansible Path Traversal (Galaxy Importer) Symlink Drop
CVE-2023-5189 Published on November 14, 2023

Hub: insecure galaxy-importer tarfile extraction
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

Vendor Advisory Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

CVE-2023-5189 can be exploited with network access, requires user interaction and a small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a high impact on integrity, and no impact on availability.

Exploitation:
NONE
Automatable:
NO
Technical Impact:
PARTIAL
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
HIGH
Availability Impact:
NONE

Timeline

Reported to Red Hat.

Made public. 34 days later.

Weakness Type

Relative Path Traversal

The software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory. This allows attackers to traverse the file system to access files or directories that are outside of the restricted directory.


Products Associated with CVE-2023-5189

Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.

Red Hat Satellite
Red Hat Ansible Automation Platform
Red Hat Ansible Automation Platform Inside
Red Hat Ansible Automation Platform Developer
Red Hat Satellite Utils
Red Hat Satellite Capsule
Red Hat Satellite Maintenance
Red Hat Ansible

Affected Versions

Red Hat Ansible Automation Platform 2.4 for RHEL 8: Red Hat Ansible Automation Platform 2.4 for RHEL 9: Red Hat Satellite 6.14 for RHEL 8: Red Hat Satellite 6.14 for RHEL 8: Red Hat Satellite 6.15 for RHEL 8: Red Hat Satellite 6.15 for RHEL 8:

Exploit Probability

EPSS
0.98%
Percentile
62.51%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.