CVE-2021-3702

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their directory at that name, and then have access to ansible-runner's private_data_dir the next time ansible-runner made use of the private_data_dir. The highest Threat out of this flaw is to integrity and confidentiality.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-362

Affected software

No affected versions have been published.

Timeline

Published
Aug 23, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-370209.1There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bCVE-2021-370219.1There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bCVE-2021-370229.8There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause root permiCVE-2021-370236.5There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause media files wCVE-2021-370247.5There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crasCVE-2021-370257.5There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crasCVE-2021-370267.5There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crasCVE-2021-370277.5There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity.CVE-2021-370286.7There is a command injection vulnerability in the HG8045Q product. When the command-line interface is enabled, which is disabled by default,CVE-2021-370295.3There is an Identity verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availaCVE-2021-37037.5It was found that the CVE-2021-27918, CVE-2021-31525 and CVE-2021-33196 have been incorrectly mentioned as fixed in RHSA for Serverless 1.16CVE-2021-370307.5There is an Improper permission vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availabi
CVE-2021-3702: Medium severity, CVSS 6.3 | Vulnix