{"id":"CVE-2021-3532","aliases":["EUVD-2021-0011","PYSEC-2021-125","UBUNTU-CVE-2021-3532"],"status":"rejected","description":"This CVE is marked as INVALID and not a bug","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","from":"osv"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2021-06-09T11:09:03Z","modified":"2025-10-24T04:49:12Z","affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.1.0+dfsg-2","2.5.0+dfsg-1","2.5.1+dfsg-1","2.5.1+dfsg-1ubuntu0.1","2.5.1+dfsg-1ubuntu0.1+esm1","2.5.1+dfsg-1ubuntu0.1+esm2","2.5.1+dfsg-1ubuntu0.1+esm3","2.5.1+dfsg-1ubuntu0.1+esm4","2.5.1+dfsg-1ubuntu0.1+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.3+dfsg-1","2.8.6+dfsg-1","2.9.2+dfsg-1","2.9.4+dfsg-1","2.9.6+dfsg-1","2.9.6+dfsg-1ubuntu0.1~esm1","2.9.6+dfsg-1ubuntu0.1~esm2","2.9.6+dfsg-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.7+merged+base+2.10.8+dfsg-1","2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm1","2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4"]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3532","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3532","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-3532","description":"This CVE is marked as INVALID and not a bug","status":"rejected","published":"2021-06-09T11:09:03Z","modified":"2024-01-15T16:44:44.547Z","updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-0011","description":"This CVE is marked as INVALID and not a bug","status":"published","published":"2021-06-09T11:09:03Z","modified":"2024-01-15T16:44:44Z","updated_at":"2026-11-03T03:50:52.307521Z"}],"nvd":[{"id":"CVE-2021-3532","description":"Rejected reason: This CVE is marked as INVALID and not a bug","status":"rejected","published":"2021-06-09T12:15:08.097Z","modified":"2024-01-15T17:15:08.337Z","updated_at":"2026-11-02T14:06:54.439974Z"}],"osv":[{"id":"UBUNTU-CVE-2021-3532","description":"Rejected reason: This CVE is marked as INVALID and not a bug","status":"published","published":"2021-06-09T12:15:00Z","modified":"2025-10-24T04:49:12Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"PYSEC-2021-125","description":"A flaw was found in Ansible where the secret information present in async_files are getting disclosed when the user changes the jobdir to a world readable directory. Any secret information in an async status file will be readable by a malicious user on that system. This flaw affects Ansible Tower 3.7 and Ansible Automation Platform 1.2.","status":"withdrawn","published":"2021-06-09T12:15:00Z","modified":"2025-10-09T07:23:18.35501Z","updated_at":"2026-11-02T15:52:52.682031Z"}]}}