CVE-2017-2809 describes an exploitable vulnerability in the YAML loading functionality of ansible-vault before version 1.0.5, allowing for arbitrary Python command execution through specially crafted vault files. This high-severity vulnerability (CVSS 7.8) requires user interaction (UI:R) and local access (AV:L) but can lead to complete compromise of confidentiality, integrity, and availability (C:H/I:H/A:H). While the vulnerability is not on the CISA KEV catalog and lacks public exploit intelligence (Metasploit, Nuclei, ExploitDB), its FAUCET Risk Score of 60/100 indicates a moderate risk, despite minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.0.4CPE matchmatch criteria | cpe:2.3:a:ansible-vault_project:ansible-vault:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.