Skip to content
OpenAdvisories

Package · Alpine

ansible

27 known vulnerabilities.

3 results · Clear filters · Feed

  • Low 3.9

    Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible

    A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the re…

  • Low 3.9

    Exposure of Sensitive Information to an Unauthorized Actor in Ansible

    A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advant…

  • Low 3.1

    Ansible sensitive information disclosure

    ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.