| Insertion of Sensitive Information into Log File in ansibleCVE-2021-20180 · GHSA-FH5V-5F35-2RV2Version ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Ansible leaks sensitive information to logs when told not toCVE-2019-14858 · GHSA-H653-95QW-H2MPVersion ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Ansible Uses Plugins That Disclose CredentialsCVE-2019-14846 · GHSA-PM48-CVV2-29Q5Version ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
High
|
Fix reported |
|
| Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary FileCVE-2020-1733 · GHSA-G4MQ-6FP5-QWCFVersion ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
Low
|
Fix reported |
|
| Ansible Path Traversal vulnerabilityCVE-2019-3828 · GHSA-74VQ-H4Q8-X6JVVersion ranges need review. |
ansibleCloudForms Management Engine 5/ansible |
PyPIRed Hat |
Low
|
Fix reported |
|
| Improper Verification of Cryptographic Signature in ansibleCVE-2020-14365 · GHSA-M429-FHMV-C6Q2Version ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in AnsibleCVE-2019-14905 · GHSA-FRXJ-5J27-F8RFVersion ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
High
|
Fix reported |
|
| Insertion of Sensitive Information into Log File in ansibleCVE-2021-20178 · GHSA-WV5P-GMMV-WH9VVersion ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
High
|
Fix reported |
|
| Exposure of Resource to Wrong Sphere and Insecure Temporary File in AnsibleCVE-2020-10744 · GHSA-VP9J-RGHQ-8JHHVersion ranges need review. |
ansibleRed Hat Ansible Engine 2/ansible |
PyPIRed Hat |
Low
|
Fix reported |
|
| OS Command Injection in ansibleCVE-2020-1734 · GHSA-H39Q-95Q5-9JFPVersion ranges need review. |
ansibleRed Hat Ansible Engine 2/ansible |
PyPIRed Hat |
High
|
Fix reported |
|
| Insertion of Sensitive Information into Log File in ansibleCVE-2021-20191 · GHSA-8F4M-HCCC-8QPHVersion ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Ansible Exposes Sensitive InformationCVE-2021-20228 · GHSA-5RRG-RR89-X9MVVersion ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
High
|
Fix reported |
|
| OS Command Injection and Improper Input Validation in ansibleCVE-2019-14904 · GHSA-GWR8-5J83-483CVersion ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
High
|
Fix reported |
|
| Argument Injection in AnsibleCVE-2020-1738 · GHSA-F85H-23MF-2FWHVersion ranges need review. |
ansibleRed Hat Ansible Engine 2/ansible |
PyPIRed Hat |
Low
|
Fix reported |
|
| Improper Input Validation and Command Injection in AnsibleCVE-2021-3583 · GHSA-2PFH-Q76X-GWVMVersion ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
High
|
Fix reported |
|
| Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansibleCVE-2020-14332 · GHSA-J667-C2HM-F2WPVersion ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansibleCVE-2020-14330 · GHSA-785X-QW4V-6872Version ranges need review. |
ansibleRed Hat Ansible Tower 3/ansible |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Exposure of Sensitive Information to an Unauthorized Actor in ansibleCVE-2019-10156 · GHSA-GRGM-PPH5-J5H7Version ranges need review. |
ansibleCloudForms Management Engine 5/ansible |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Tower: normal users can intercept stdout from jobs running in other organizationsCVE-2020-10698 |
Red Hat Ansible Tower 3/ansible |
Red Hat |
Low
|
No fix reported |
|
| ansible: async_file sensitive information disclosureCVE-2021-3532 |
Red Hat Ansible Automation Platform 1.2/AnsibleRed Hat Ansible Engine 2/ansible |
Red Hat |
Unknown
|
No fix reported |
|