CVE:CVE-2021-3533
CNNVD:CNNVD-202105-721
Red Hat Ansible是美国红帽（Red Hat）公司的一款计算机系统配置管理器。该产品可用于发布、管理和编排计算机系统。Ansible Tower是其中的一个提供了用户界面（UI）、仪表板和REST API的任务控制应用程序。
Red Hat Ansible 存在竞争条件问题漏洞。该漏洞源于Ansible用户将ANSIBLE_ASYNC_DIR设置为世界可写目录的子目录。
solution:Upgrade redhat ansible_automation_platform to a higher version than 1.2,and avoid the version 1.2; Upgrade redhat ansible_tower to a higher version than 3.7.0,3.0,and avoid the version 3.7.0,3.0; Upgrade redhat ansible_engine to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34; Upgrade redhat openstack-rdo to a higher version than -