CVE-2013-2233

Impact

Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.openwall.com/lists/oss-security/2013/07/01/2
• http://www.openwall.com/lists/oss-security/2013/07/02/6
• https://bugzilla.redhat.com/show_bug.cgi?id=980821
• https://github.com/ansible/ansible/issues/857
• https://www.ansible.com/security
• http://www.openwall.com/lists/oss-security/2013/07/01/2
• http://www.openwall.com/lists/oss-security/2013/07/02/6
• https://bugzilla.redhat.com/show_bug.cgi?id=980821
• https://github.com/ansible/ansible/issues/857
• https://www.ansible.com/security