All products

Red Hat Ansible Tower 3/ansible

Red Hat · Package
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Insertion of Sensitive Information into Log File in ansibleCVE-2021-20180 · GHSA-FH5V-5F35-2RV2Version ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat Medium Fix reported
Ansible leaks sensitive information to logs when told not toCVE-2019-14858 · GHSA-H653-95QW-H2MPVersion ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat Medium Fix reported
Ansible Uses Plugins That Disclose CredentialsCVE-2019-14846 · GHSA-PM48-CVV2-29Q5Version ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat High Fix reported
Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary FileCVE-2020-1733 · GHSA-G4MQ-6FP5-QWCFVersion ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat Low Fix reported
Ansible Path Traversal vulnerabilityCVE-2019-3828 · GHSA-74VQ-H4Q8-X6JVVersion ranges need review. ansibleCloudForms Management Engine 5/ansible PyPIRed Hat Low Fix reported
Improper Verification of Cryptographic Signature in ansibleCVE-2020-14365 · GHSA-M429-FHMV-C6Q2Version ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat Medium Fix reported
Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in AnsibleCVE-2019-14905 · GHSA-FRXJ-5J27-F8RFVersion ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat High Fix reported
Insertion of Sensitive Information into Log File in ansibleCVE-2021-20178 · GHSA-WV5P-GMMV-WH9VVersion ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat High Fix reported
Exposure of Resource to Wrong Sphere and Insecure Temporary File in AnsibleCVE-2020-10744 · GHSA-VP9J-RGHQ-8JHHVersion ranges need review. ansibleRed Hat Ansible Engine 2/ansible PyPIRed Hat Low Fix reported
OS Command Injection in ansibleCVE-2020-1734 · GHSA-H39Q-95Q5-9JFPVersion ranges need review. ansibleRed Hat Ansible Engine 2/ansible PyPIRed Hat High Fix reported
Insertion of Sensitive Information into Log File in ansibleCVE-2021-20191 · GHSA-8F4M-HCCC-8QPHVersion ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat Medium Fix reported
Ansible Exposes Sensitive InformationCVE-2021-20228 · GHSA-5RRG-RR89-X9MVVersion ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat High Fix reported
OS Command Injection and Improper Input Validation in ansibleCVE-2019-14904 · GHSA-GWR8-5J83-483CVersion ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat High Fix reported
Argument Injection in AnsibleCVE-2020-1738 · GHSA-F85H-23MF-2FWHVersion ranges need review. ansibleRed Hat Ansible Engine 2/ansible PyPIRed Hat Low Fix reported
Improper Input Validation and Command Injection in AnsibleCVE-2021-3583 · GHSA-2PFH-Q76X-GWVMVersion ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat High Fix reported
Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansibleCVE-2020-14332 · GHSA-J667-C2HM-F2WPVersion ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat Medium Fix reported
Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansibleCVE-2020-14330 · GHSA-785X-QW4V-6872Version ranges need review. ansibleRed Hat Ansible Tower 3/ansible PyPIRed Hat Medium Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in ansibleCVE-2019-10156 · GHSA-GRGM-PPH5-J5H7Version ranges need review. ansibleCloudForms Management Engine 5/ansible PyPIRed Hat Medium Fix reported
Tower: normal users can intercept stdout from jobs running in other organizationsCVE-2020-10698 Red Hat Ansible Tower 3/ansible Red Hat Low No fix reported
ansible: async_file sensitive information disclosureCVE-2021-3532 Red Hat Ansible Automation Platform 1.2/AnsibleRed Hat Ansible Engine 2/ansible Red Hat Unknown No fix reported