ansible-core vulnerabilities (Ubuntu)
24 vulnerabilities.
-
ansible-coreUbuntu Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902) 6.7 Medium -
ansible-coreUbuntu A flaw was found in ansible-core. When a task marked `no_log: true` fails, the task result is... 5.5 Medium -
ansible-coreUbuntu Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution 8.8 High -
ansible-coreUbuntu Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure 6.8 Medium -
ansible-coreUbuntu Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller 8.1 High -
ansible-coreUbuntu [Unknown description] No score -
ansible-coreUbuntu Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings 5.5 Medium -
ansible-coreUbuntu [Unknown description] No score -
ansible-coreUbuntu Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332) 7.8 High -
ansible-coreUbuntu Ansible-lightspeed: ansible lightspeed: session hijacking and unauthorized data access due to insufficient session expiration 5.3 Medium -
ansible-coreUbuntu Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown 7.3 High -
ansible-coreUbuntu Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 7.8 High -
ansible-coreUbuntu Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output 5.5 Medium -
ansible-coreUbuntu Ansible-core: unsafe tagging bypass via hostvars object in ansible-core 5.5 Medium -
ansible-coreUbuntu Ansible-core: ansible-core user may read/write unauthorized content 6.3 Medium -
ansible-coreUbuntu Ansible-core: exposure of sensitive information in ansible vault files due to improper logging 5.5 Medium -
ansible-coreUbuntu Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration 5.0 Medium -
ansible-coreUbuntu Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files 6.3 Medium -
ansible-coreUbuntu Ansible: template injection 7.1 High -
ansible-coreUbuntu Hub: insecure galaxy-importer tarfile extraction 6.3 Medium -
ansible-coreUbuntu Platform: token exposed at importing project 6.3 Medium -
ansible-coreUbuntu Platform: ec2_key module prints out the private key directly to the standard output 7.3 High -
ansible-coreUbuntu Ansible leaks password to logs 7.5 High -
ansible-coreUbuntu A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a... 6.5 Medium