Security Advisory

CVE-2014-4659

5.5
MEDIUM

Vulnerability Description

Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format.
Published Date February 20, 2020
Official Source NIST NVD Advisory