AE
Product
Ansible Engine
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 14Low 0
Watch
Add Ansible Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1737 | 7.8 | Mar 9 | A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not… Affected: before 2.7.17; 2.8.0 before 2.8.9; 2.9.0 before 2.9.6 |
| CVE-2019-14846 | 7.8 | Oct 8 | In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of… Affected: before 2.6.20; 2.7.0 before 2.7.14; 2.8.0 before 2.8.6; 2.0; 2.8.0 |
| CVE-2018-16837 | 7.8 | Oct 23 | Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen Affected: 2.0; 2.5; 2.6; 2.7 |
| CVE-2018-10875 | 7.8 | Jul 13 | A flaw was found in ansible Affected: 2.0; 2.4; 2.5; 2.6 |
| CVE-2018-10874 | 7.8 | Jul 2 | In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run… Affected: 2.0; 2.4; 2.5; 2.6 |
| CVE-2021-20228 | 7.5 | Apr 29 | A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the… Affected: 2.9.18; 2.0; 2.9 |
| CVE-2020-1734 | 7.4 | Mar 3 | A flaw was found in the pipe lookup plugin of ansible Affected: through 2.7.16; 2.8.8; 2.9.5 |
| CVE-2021-3583 | 7.1 | Sep 22 | A flaw was found in Ansible, where a user's controller is vulnerable to template injection Affected: before 2.9.23 |
| CVE-2020-14365 | 7.1 | Sep 23 | A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module Affected: 2.8.0 through 2.8.15; 2.9.0 through 2.9.13 |
Showing 9