Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Red Hat Ansible — FEDORA-2020-3990f03ba3 Clear all filters
TI-2020-01684 CVE-2020-1740 · GHSA-vcg8-98q8-g7mj

Information disclosure in Red Hat ansible

Priority LOW 22

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.0036 Published 2020-03-16 Partial fix · 2.7.17, 2.8.11 +1 CWE-377
TI-2020-01679 CVE-2020-1735 · GHSA-gfr2-qpxh-qj9m

Path traversal in Red Hat ansible

Priority LOW 22

A flaw was found in the Ansible Engine when the fetch module is used.

CVSS 3.1MEDIUM 4.6 Local High privileges No interaction EPSS 0.00468 Published 2020-03-16 Partial fix · 2.7.18, 2.8.12 +1 CWE-22
TI-2020-01696 CVE-2020-1753 · GHSA-86hp-cj9j-33vv

Information disclosure in Red Hat Ansible

Priority LOW 25

A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s mo…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00506 Published 2020-03-16 Partial fix · 2.7.18, 2.8.12 +1 CWE-200
TI-2020-01677 CVE-2020-1733 · GHSA-g4mq-6fp5-qwcf

Race condition in Red Hat Ansible

Priority LOW 23

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.004 Published 2020-03-11 Partial fix · 2.7.17, 2.8.11 +1 CWE-377