Red Hat Ceph Storage 9/ansible-collection-community-general

Red Hat · Package

3 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the IPA bind password in logs and process listingsCVE-2026-80158	Red Hat Ceph Storage 5/ansible-collection-community-general Red Hat Ceph Storage 9/ansible-collection-community-general	Red Hat	Medium	No fix reported	Not recorded
community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the Ansible controllerCVE-2026-87874	Red Hat Ceph Storage 5/ansible-collection-community-general Red Hat Ceph Storage 9/ansible-collection-community-general	Red Hat	Medium	No fix reported	Not recorded
community.general: community.general: OCAPI module_utils (ocapi_command, ocapi_info) hardcode validate_certs=False with no override, enabling TLS man-in-the-middle and credential disclosureCVE-2026-87872	Red Hat Ceph Storage 5/ansible-collection-community-general Red Hat Ceph Storage 9/ansible-collection-community-general	Red Hat	Medium	No fix reported	Not recorded