Vulnerabilities of Red Hat Ansible

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2020-14332	A flaw was found in the Ansible Engine when using module_args	5.5 Medium	Sep 11, 2020
CVE-2020-14330	An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data…	5.0 Medium	Sep 11, 2020
CVE-2020-10744	An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running…	5.0 Medium	May 15, 2020
CVE-2020-1746	A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and…	5.0 Medium	May 12, 2020
CVE-2020-10685	A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and…	5.0 Medium	May 11, 2020
CVE-2020-10691	An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy…	5.2 Medium	Apr 30, 2020
CVE-2019-14905	A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and…	7.3 High	Mar 31, 2020
CVE-2020-10684	A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively,…	7.9 High	Mar 24, 2020
CVE-2020-1738	A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified	3.9 Low	Mar 16, 2020
CVE-2020-1740	A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files	3.9 Low	Mar 16, 2020
CVE-2020-1735	A flaw was found in the Ansible Engine when the fetch module is used	4.2 Medium	Mar 16, 2020
CVE-2020-1736	A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified	2.2 Low	Mar 16, 2020
CVE-2020-1753	A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions…	5.0 Medium	Mar 16, 2020
CVE-2020-1739	A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the…	3.9 Low	Mar 12, 2020
CVE-2020-1733	A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a…	5.0 Medium	Mar 11, 2020
CVE-2020-1737	A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function…	7.5 High	Mar 9, 2020
CVE-2020-1734	A flaw was found in the pipe lookup plugin of ansible	7.4 High	Mar 3, 2020
CVE-2019-14864	Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the…	5.7 Medium	Jan 2, 2020
CVE-2019-10217	A flaw was found in ansible 2.8.0 before 2.8.4	5.7 Medium	Nov 25, 2019
CVE-2019-10206	ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before…	6.4 Medium	Nov 22, 2019
CVE-2019-14858	A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5	7.3 High	Oct 14, 2019
CVE-2019-14846	In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were…	7.3 High	Oct 8, 2019
CVE-2019-10156	A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing…	4.6 Medium	Jul 30, 2019
CVE-2019-3828	Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and…	4.2 Medium	Mar 27, 2019
CVE-2018-16876	ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on…	3.1 Low	Jan 3, 2019

Other Red Hat products