CVE ID:	CVE-2018-10875
Description:	A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.
Test IDs:	1.3.6.1.4.1.25623.1.0.891923   1.3.6.1.4.1.25623.1.0.704396
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10875 Debian Security Information: DSA-4396 (Google Search) https://www.debian.org/security/2019/dsa-4396 https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html RedHat Security Advisories: RHBA-2018:3788 https://access.redhat.com/errata/RHBA-2018:3788 RedHat Security Advisories: RHSA-2018:2150 https://access.redhat.com/errata/RHSA-2018:2150 RedHat Security Advisories: RHSA-2018:2151 https://access.redhat.com/errata/RHSA-2018:2151 RedHat Security Advisories: RHSA-2018:2152 https://access.redhat.com/errata/RHSA-2018:2152 RedHat Security Advisories: RHSA-2018:2166 https://access.redhat.com/errata/RHSA-2018:2166 RedHat Security Advisories: RHSA-2018:2321 https://access.redhat.com/errata/RHSA-2018:2321 RedHat Security Advisories: RHSA-2018:2585 https://access.redhat.com/errata/RHSA-2018:2585 RedHat Security Advisories: RHSA-2019:0054 https://access.redhat.com/errata/RHSA-2019:0054 http://www.securitytracker.com/id/1041396 SuSE Security Announcement: openSUSE-SU-2019:1125 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html https://usn.ubuntu.com/4072-1/