Threats tagged 'brew-bbot-cve-2024-9902'

CVE-2024-9902 is a vulnerability in the ansible-core user module that allows an unprivileged user to create or replace files on any system path and take ownership when a privileged user runs the module against the unprivileged user's home directory. This can lead to unauthorized file modification and ownership changes if directory traversal permissions are present. The issue affects versions from 1.0.5.1665 up to but not including 2.1.2_1 and has been assigned a CVSS score of 6.3 (medium severity). A fix is available in version 2.1.2_1.