ansible vulnerabilities (Debian)
78 vulnerabilities.
-
ansibleDebian Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure 6.8 Medium -
ansibleDebian Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller 8.1 High -
ansibleDebian [Unknown description] No score -
ansibleDebian Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings 5.5 Medium -
ansibleDebian [Unknown description] No score -
ansibleDebian Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332) 7.8 High -
ansibleDebian Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown 7.3 High -
ansibleDebian Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 7.8 High -
ansibleDebian Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output 5.5 Medium -
ansibleDebian ansible - regression update No score -
ansibleDebian Ansible-core: unsafe tagging bypass via hostvars object in ansible-core 5.5 Medium -
ansibleDebian Ansible-core: ansible-core user may read/write unauthorized content 6.3 Medium -
ansibleDebian Ansible-core: exposure of sensitive information in ansible vault files due to improper logging 5.5 Medium -
ansibleDebian Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration 5.0 Medium -
ansibleDebian Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files 6.3 Medium -
ansibleDebian Ansible: template injection 7.1 High -
ansibleDebian Platform: ec2_key module prints out the private key directly to the standard output 7.3 High -
ansibleDebian Ansible leaks password to logs 7.5 High -
ansibleDebian Ansible discloses sensitive information in traceback error message 5.5 Medium -
ansibleDebian Improper Input Validation and Command Injection in Ansible 7.1 High -
ansibleDebian A flaw was found in several ansible modules, where parameters containing credentials, such as... 5.5 Medium -
ansibleDebian Ansible Exposes Sensitive Information 7.5 High -
ansibleDebian Insertion of Sensitive Information into Log File in ansible 5.5 Medium -
ansibleDebian Insertion of Sensitive Information into Log File in ansible 5.5 Medium -
ansibleDebian Insertion of Sensitive Information into Log File in ansible 5.5 Medium -
ansibleDebian Insufficiently random values in Ansible 5.5 Medium -
ansibleDebian Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible 5.5 Medium -
ansibleDebian Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible 5.0 Medium -
ansibleDebian Improper Verification of Cryptographic Signature in ansible 7.1 High -
ansibleDebian Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
ansibleDebian Exposure of Sensitive Information to an Unauthorized Actor in ansible 5.0 Medium -
ansibleDebian Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
ansibleDebian Path Traversal in Ansible 5.2 Medium -
ansibleDebian Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible 7.9 High -
ansibleDebian Argument Injection in Ansible 3.9 Low -
ansibleDebian Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible 3.9 Low -
ansibleDebian Path Traversal in Ansible 4.2 Medium -
ansibleDebian Incorrect Permission Assignment for Critical Resource in Ansible 2.2 Low -
ansibleDebian Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible 5.0 Medium -
ansibleDebian Exposure of Sensitive Information to an Unauthorized Actor in Ansible 3.9 Low -
ansibleDebian Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File 5.0 Medium -
ansibleDebian Path Traversal in Ansible 7.5 High -
ansibleDebian OS Command Injection in ansible 7.4 High -
ansibleDebian Ansible sets unsafe permissions for sources.list 5.5 Medium -
ansibleDebian Ansible Sensitive Files Are Locally Readable 5.5 Medium -
ansibleDebian Ansible Remote Code Execution 9.8 Critical -
ansibleDebian Ansible discloses credential information 5.5 Medium -
ansibleDebian Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible 7.3 High -
ansibleDebian OS Command Injection and Improper Input Validation in ansible 7.3 High -
ansibleDebian Ansible unsafe evaluation of some strings 7.5 High - Show olderLoading…