Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2020-01683 CVE-2020-1739 · GHSA-923p-fr2c-g5m2

Information disclosure in Red Hat Ansible

Priority LOW 18

A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the s…

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.00358 Published 2020-03-12 Partial fix · 2.7.17, 2.8.11 +1 CWE-200
TI-2020-01681 CVE-2020-1737 · GHSA-893h-35v4-mxqx

Path traversal in Red Hat Ansible

Priority LOW 34

A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong to the destination…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00365 Published 2020-03-09 Partial fix · 2.8.9, 2.9.6 +1 CWE-22