CVE-2021-3533
CVE-2021-3533 has been rejected by its source and should not be treated as a live vulnerability, published June 9, 2021. Fixed in ansible 3.0.0.
This vulnerability does not meet the criteria for a security vulnerability
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
What each source reports
OSV Score usedUBUNTU-CVE-2021-3533
Rejected reason: This vulnerability does not meet the criteria for a security vulnerability
- Record
UBUNTU-CVE-2021-3533- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
CVE List No score
This vulnerability does not meet the criteria for a security vulnerability
- Record
CVE-2021-3533- Updated
- 2026-11-02
EUVDEUVD-2021-0009 No score
This vulnerability does not meet the criteria for a security vulnerability
- Record
EUVD-2021-0009- Updated
- 2026-11-03
NVD No score
Rejected reason: This vulnerability does not meet the criteria for a security vulnerability
- Record
CVE-2021-3533- Updated
- 2026-11-02
OSVPYSEC-2021-126 No score
A flaw was found in Ansible if an ansible user sets ANSIBLE_ASYNC_DIR to a subdirectory of a world writable directory. When this occurs, there is a race condition on the managed machine. A malicious, non-privileged account on the remote machine can exploit the race condition to access the async result data. This flaw affects Ansible Tower 3.7 and Ansible Automation Platform 1.2.
- Record
PYSEC-2021-126- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ansiblePyPI |
before 3.0.0, plus listed versions 1.01.11.21.2.11.2.2 Show 45 moreShow less1.2.31.3.01.3.11.3.21.3.31.3.41.41.4.11.4.21.4.31.4.41.4.51.51.5.11.5.21.5.31.5.41.5.51.61.6.11.6.101.6.21.6.31.6.41.6.51.6.61.6.71.6.81.6.91.71.7.11.7.21.81.8.11.8.21.8.31.8.41.9.01.9.0.11.9.11.9.21.9.31.9.41.9.51.9.6 |
3.0.0 |
ansibleUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.1+dfsg-11.3.4+dfsg-11.4.0+dfsg-11.4.1+dfsg-11.4.3+dfsg-1 Show 5 moreShow less1.4.4+dfsg-11.5.4+dfsg-11.5.4+dfsg-1ubuntu0.1~esm11.5.4+dfsg-1ubuntu0.1~esm21.5.4+dfsg-1ubuntu0.1~esm3 |
None known |
ansibleUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.3.1.0+dfsg-22.5.0+dfsg-12.5.1+dfsg-12.5.1+dfsg-1ubuntu0.12.5.1+dfsg-1ubuntu0.1+esm1 Show 4 moreShow less2.5.1+dfsg-1ubuntu0.1+esm22.5.1+dfsg-1ubuntu0.1+esm32.5.1+dfsg-1ubuntu0.1+esm42.5.1+dfsg-1ubuntu0.1+esm5 |
None known |
ansibleUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.8.3+dfsg-12.8.6+dfsg-12.9.2+dfsg-12.9.4+dfsg-12.9.6+dfsg-12.9.6+dfsg-1ubuntu0.1~esm12.9.6+dfsg-1ubuntu0.1~esm22.9.6+dfsg-1ubuntu0.1~esm3 |
None known |
ansibleUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.10.7+merged+base+2.10.8+dfsg-12.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm12.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, NVD, OSV |
References
Left out here: 205 versions. The JSON record has them.