Vulnérabilités de Red Hat Ansible

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2020-14332	A flaw was found in the Ansible Engine when using module_args	5.5 Moyenne	11 sept. 2020
CVE-2020-14330	An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data…	5.0 Moyenne	11 sept. 2020
CVE-2020-10744	An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running…	5.0 Moyenne	15 mai 2020
CVE-2020-1746	A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and…	5.0 Moyenne	12 mai 2020
CVE-2020-10685	A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and…	5.0 Moyenne	11 mai 2020
CVE-2020-10691	An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy…	5.2 Moyenne	30 avr. 2020
CVE-2019-14905	A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and…	7.3 Élevée	31 mars 2020
CVE-2020-10684	A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively,…	7.9 Élevée	24 mars 2020
CVE-2020-1738	A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified	3.9 Faible	16 mars 2020
CVE-2020-1740	A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files	3.9 Faible	16 mars 2020
CVE-2020-1735	A flaw was found in the Ansible Engine when the fetch module is used	4.2 Moyenne	16 mars 2020
CVE-2020-1736	A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified	2.2 Faible	16 mars 2020
CVE-2020-1753	A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions…	5.0 Moyenne	16 mars 2020
CVE-2020-1739	A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the…	3.9 Faible	12 mars 2020
CVE-2020-1733	A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a…	5.0 Moyenne	11 mars 2020
CVE-2020-1737	A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function…	7.5 Élevée	9 mars 2020
CVE-2020-1734	A flaw was found in the pipe lookup plugin of ansible	7.4 Élevée	3 mars 2020
CVE-2019-14864	Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the…	5.7 Moyenne	2 janv. 2020
CVE-2019-10217	A flaw was found in ansible 2.8.0 before 2.8.4	5.7 Moyenne	25 nov. 2019
CVE-2019-10206	ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before…	6.4 Moyenne	22 nov. 2019
CVE-2019-14858	A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5	7.3 Élevée	14 oct. 2019
CVE-2019-14846	In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were…	7.3 Élevée	8 oct. 2019
CVE-2019-10156	A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing…	4.6 Moyenne	30 juil. 2019
CVE-2019-3828	Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and…	4.2 Moyenne	27 mars 2019
CVE-2018-16876	ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on…	3.1 Faible	3 janv. 2019

Autres produits Red Hat