[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frnZD1BEshlxQpESkYT0TQSMKnBjnfgI7havot1V0pp0":3,"g5a-risk:CVE-2021-3701":110},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":28,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":40,"references":41,"referencesCount":60,"weaknesses":61,"weaknessesCount":40,"isActivelyExploited":70,"cisaInfo":28,"otxData":28,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":105,"notableEvents":106},"CVE-2021-3701","What is CVE-2021-3701?","A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R\u002FW locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate user in a place they did not expect. The highest threat from this vulnerability is to confidentiality and integrity.","A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R\u002FW locations. This flaw allows an a...","2022-08-23T16:15:09.5","2023-02-17T19:06:27.26",6.6,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","LOCAL","LOW","REQUIRED","UNCHANGED","HIGH","NONE","MEDIUM",null,1.3,5.2,0.00285,[31,31,31,31,31,31,31],"Medium",[35],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"redhat","ansible_runner","2.0.0","cpe:2.3:a:redhat:ansible_runner:2.0.0:-:*:*:*:*:*:*",1,[42,47,52,57],{"url":43,"source":44,"tags":45},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2021-3701","Red Hat",[46],"Vendor Advisory",{"url":48,"source":44,"tags":49},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1977959",[50,51,46],"Issue Tracking","Patch",{"url":53,"source":54,"tags":55},"https:\u002F\u002Fgithub.com\u002Fansible\u002Fansible-runner\u002Fissues\u002F738","GitHub",[50,56],"Third Party Advisory",{"url":58,"source":54,"tags":59},"https:\u002F\u002Fgithub.com\u002Fansible\u002Fansible-runner\u002Fpull\u002F742\u002Fcommits",[51,56],4,[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2021-3701? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-3701, a medium severity cyber security vulnerability from 2022. A flaw was found in ansible-runner where the default tempo...","CVE-2021-3701, CVE-2021-3701 vulnerability, CVE-2021-3701 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, redhat security, ansible_runner vulnerability","\u002Fwhat-is\u002Fcve-2021-3701",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-3701","Cybersecurity","CVE-2021-3701, CVE-2021-3701 vulnerability, CVE-2021-3701 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":28,"Negate":28,"Nodes":99},[100],{"Operator":101,"Negate":28,"CPEMatch":102},"OR",[103],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":104,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"1470BAF6-3B08-42DB-AD44-B5887D24D787",[],[],{"lastModified":11,"cacheTime":108,"version":109},1792265808763,"2.0",{"score":111,"band":112,"action":113,"scoredAt":114},22,"Low","Monitor","2026-10-16T06:55:30.066393+00:00"]