ansible vulnerabilities (Ubuntu)
83 vulnerabilities.
-
ansibleUbuntu A flaw was found in ansible-core. When a task marked `no_log: true` fails, the task result is... 5.5 Medium -
ansibleUbuntu Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 8.8 High -
ansibleUbuntu Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure 6.8 Medium -
ansibleUbuntu Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller 8.1 High -
ansibleUbuntu [Unknown description] No score -
ansibleUbuntu Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings 5.5 Medium -
ansibleUbuntu [Unknown description] No score -
ansibleUbuntu Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332) 7.8 High -
ansibleUbuntu Ansible-lightspeed: ansible lightspeed: session hijacking and unauthorized data access due to insufficient session expiration 5.3 Medium -
ansibleUbuntu Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown 7.3 High -
ansibleUbuntu Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 7.8 High -
ansibleUbuntu Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output 5.5 Medium -
ansibleUbuntu ansible regression No score -
ansibleUbuntu ansible regression No score -
ansibleUbuntu ansible regression No score -
ansibleUbuntu Ansible-core: unsafe tagging bypass via hostvars object in ansible-core 5.5 Medium -
ansibleUbuntu Ansible-core: ansible-core user may read/write unauthorized content 6.3 Medium -
ansibleUbuntu Ansible-core: exposure of sensitive information in ansible vault files due to improper logging 5.5 Medium -
ansibleUbuntu Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration 5.0 Medium -
ansibleUbuntu Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files 6.3 Medium -
ansibleUbuntu Ansible: template injection 7.1 High -
ansibleUbuntu Hub: insecure galaxy-importer tarfile extraction 6.3 Medium -
ansibleUbuntu Platform: token exposed at importing project 6.3 Medium -
ansibleUbuntu Platform: ec2_key module prints out the private key directly to the standard output 7.3 High -
ansibleUbuntu Ansible leaks password to logs 7.5 High -
ansibleUbuntu A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a... 6.5 Medium -
ansibleUbuntu Ansible discloses sensitive information in traceback error message 5.5 Medium -
ansibleUbuntu Improper Input Validation and Command Injection in Ansible 7.1 High -
ansibleUbuntu This vulnerability does not meet the criteria for a security vulnerability 2.5 Low -
ansibleUbuntu This CVE is marked as INVALID and not a bug 5.5 Medium -
ansibleUbuntu A flaw was found in several ansible modules, where parameters containing credentials, such as... 5.5 Medium -
ansibleUbuntu Ansible Exposes Sensitive Information 7.5 High -
ansibleUbuntu Insertion of Sensitive Information into Log File in ansible 5.5 Medium -
ansibleUbuntu Insertion of Sensitive Information into Log File in ansible 5.5 Medium -
ansibleUbuntu Insertion of Sensitive Information into Log File in ansible 5.5 Medium -
ansibleUbuntu Insufficiently random values in Ansible 5.5 Medium -
ansibleUbuntu A flaw was found in Ansible Collection community.crypto. openssl_privatekey_info exposes private... 7.5 High -
ansibleUbuntu Ansible does not collect garbage after playbook run 5.0 Medium -
ansibleUbuntu A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have… 6.6 Medium -
ansibleUbuntu Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible 5.5 Medium -
ansibleUbuntu Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible 5.0 Medium -
ansibleUbuntu Improper Verification of Cryptographic Signature in ansible 7.1 High -
ansibleUbuntu Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
ansibleUbuntu Exposure of Sensitive Information to an Unauthorized Actor in ansible 5.0 Medium -
ansibleUbuntu Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible 5.0 Medium -
ansibleUbuntu Path Traversal in Ansible 5.2 Medium -
ansibleUbuntu Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible 7.9 High -
ansibleUbuntu Argument Injection in Ansible 3.9 Low -
ansibleUbuntu Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible 3.9 Low -
ansibleUbuntu Path Traversal in Ansible 4.2 Medium - Show olderLoading…