What’s Vulnerable › Vulnerabilities

CVE-2014-3498

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-08 · updated 2026-06-17
• Weakness: CWE-20

Description

The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.

Affected products

• Red Hat Ansible: through 1.6.5

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1335551
• https://github.com/ansible/ansible/commit/8ed6350e65c82292a631f08845dfaacffe7f07f5
• https://bugzilla.redhat.com/show_bug.cgi?id=1335551
• https://github.com/ansible/ansible/commit/8ed6350e65c82292a631f08845dfaacffe7f07f5

Get alerted when CVE-2014-3498 or the next vulnerability affects your stack