Skip to contentRed Hat Ansible vulnerabilities
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +1 morePlatform: insecure websocket used when interacting with eda serverCVE-2024-16578.1 High
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +32 more +34 moreGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloadsCVE-2024-1394Fix available7.5 High
- redhat ansible, fedoraproject fedora, red hat ansible automation platform 2.4 for rhel 8 +7 more +9 moreAnsible-core: possible information leak in tasks that ignore ansible_no_log configurationCVE-2024-0690Fix available5.0 Medium
- latchset jwcrypto, fedoraproject fedora, red hat ansible automation platform 2 +7 more +9 moreJwcrypto: denail of service via specifically crafted jweCVE-2023-6681Fix available5.3 Medium
- redhat ansible automation platform, debian linux, red hat ansible automation platform 1.2 +6 more +8 moreAnsible: malicious role archive can cause ansible-galaxy to overwrite arbitrary filesCVE-2023-5115Fix available6.3 Medium
- couchbase server, cryptography.io cryptography, red hat ansible automation platform 2 +8 more +10 morePython-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659CVE-2023-50782Fix available7.5 High
- redhat ansible, fedoraproject extra packages for enterprise linux, fedora +6 more +8 moreAnsible: template injectionCVE-2023-5764Fix available7.1 High
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9, satellite 6.14 for rhel 8 +3 more +5 moreHub: insecure galaxy-importer tarfile extractionCVE-2023-51896.3 Medium
- red hat advanced cluster management for kubernetes 2, ansible automation platform 1.2, ansible tower 3 +4 more +6 moreOpenshift api admission checks does not enforce "custom-host" permissionsCVE-2022-32484.4 Medium
- red hat ansible automation platform 2.3 for rhel 8, ansible automation platform 2.3 for rhel 9, ansible automation platform 2.4 for rhel 8 +5 more +7 moreController: html injection in custom login infoCVE-2023-3971Public exploitFix available7.3 High
- redhat ansible automation platform, red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +2 more +4 morePlatform: token exposed at importing projectCVE-2023-43806.3 Medium
- redhat ansible automation platform, red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +1 more +3 morePlatform: ec2_key module prints out the private key directly to the standard outputCVE-2023-4237Fix available7.3 High
- red hat tripleo-ansible, redhat openstack, openstack tripleo ansible +1 more +3 moretripleo-ansible may disclose important configuration details from an OpenStack deploymentCVE-2022-31465.5 Medium
- red hat tripleo-ansible, redhat openstack, openstack tripleo ansible +1 more +3 moretripleo-ansible may disclose important configuration details from an OpenStack deploymentCVE-2022-31015.5 Medium
- red hat ansible automation platform 1.2, redhat ansible automation platform, red hat ansible automation platform 2 +2 moreController: cross site scripting in automation controller uiCVE-2022-32054.6 Medium
- red hat ansible-tower, redhat ansible automation platform, ansible automation platform early access +2 more +4 moreA flaw was found in ansible-tower where the default installation is vulnerable to job isolation...CVE-2021-4112Fix available8.8 High
- red hat ansible automation platformA privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a...CVE-2022-2568Fix available6.5 Medium
- red hat ansible, redhat ansible galaxy, ansible automation platform +2 moreA flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in...CVE-2021-36815.5 Medium
- red hat ansible, redhat ansible engine, ansible automation platform early access +7 more +9 moreAnsible discloses sensitive information in traceback error messageCVE-2021-3620Fix available5.5 Medium
- red hat ansible, redhat ansible automation platform, ansible engine +1 more +3 moreImproper Input Validation and Command Injection in AnsibleCVE-2021-3583Fix available7.1 High
- red hat tripleo-ansible, redhat openstack +1 moreA flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log...CVE-2021-31918Fix available7.5 High
- red hat ansible, redhat ansible tower, fedoraproject fedora +2 moreA flaw was found in several ansible modules, where parameters containing credentials, such as...CVE-2021-3447Fix available5.5 Medium
- red hat ansible, redhat ansible engine, debian linux +2 more +4 moreAnsible Exposes Sensitive InformationCVE-2021-20228Fix available7.5 High
- red hat ansible, oracle virtualization, redhat ansible tower +5 more +7 moreInsertion of Sensitive Information into Log File in ansibleCVE-2021-20191Fix available5.5 Medium
- red hat ansibleInsertion of Sensitive Information into Log File in ansibleCVE-2021-20180Fix available5.5 Medium
- red hat ansible, fedoraproject fedora, redhat ansible tower +2 moreInsertion of Sensitive Information into Log File in ansibleCVE-2021-20178Fix available5.5 Medium
- red hat ansible-tower, redhat ansible tower +1 moreA flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape...CVE-2021-20253Public exploit6.7 Medium
- red hat ansible, redhat ansible engine, debian linux +2 moreInsufficiently random values in AnsibleCVE-2020-10729Fix available5.5 Medium
- red hat ansible, redhat ansible engine, debian linux +2 moreInsertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansibleCVE-2020-14332Fix available5.5 Medium
- red hat ansible, debian linux, redhat ansible engine +2 moreImproper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansibleCVE-2020-14330Fix available5.0 Medium
- red hat ansible, redhat ansible engine, debian linux +3 more +5 moreImproper Verification of Cryptographic Signature in ansibleCVE-2020-14365Fix available7.1 High
- red hat ansible towerA data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return...CVE-2020-143375.8 Medium
- red hat ansible towerAn exposure of sensitive information flaw was found in Ansible Tower before version 3.7.1....CVE-2020-107826.5 Medium
- red hat ansible, redhat ansible tower +1 moreExposure of Resource to Wrong Sphere and Insecure Temporary File in AnsibleCVE-2020-10744Fix available5.0 Medium
- red hat ansible, redhat ansible engine, ansible tower +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in ansibleCVE-2020-1746Fix available5.0 Medium
- red hat ansible, redhat ansible engine, ansible tower +4 more +6 moreExposure of Resource to Wrong Sphere and Insecure Temporary File in AnsibleCVE-2020-10685Fix available5.0 Medium
- red hat ansible, redhat ansible engine, ansible tower +2 morePath Traversal in AnsibleCVE-2020-10691Fix available5.2 Medium
- red hat openshift-ansible, redhat openshift container platform +1 moreA flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive...CVE-2020-17415.9 Medium
- isaacs node-tar, tar, red hat confidential compute attestation +40 more +42 morenode-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path SanitizationCVE-2026-23745Public exploitFix available8.2 High
- red hat ansible, debian linux, fedoraproject fedora +2 more +4 moreCode Injection, Race Condition, and Execution with Unnecessary Privileges in AnsibleCVE-2020-10684Fix available7.9 High
- red hat ansible, redhat ansible tower, cloudforms management engine +1 more +3 moreArgument Injection in AnsibleCVE-2020-1738Fix available3.9 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in AnsibleCVE-2020-1740Fix available3.9 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 morePath Traversal in AnsibleCVE-2020-1735Fix available4.2 Medium
- red hat ansible, fedoraproject fedora, redhat ansible tower +2 more +4 moreIncorrect Permission Assignment for Critical Resource in AnsibleCVE-2020-1736Fix available2.2 Low
- red hat ansible, redhat ansible engine, debian linux +2 more +4 moreInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in AnsibleCVE-2020-1753Fix available5.0 Medium
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor in AnsibleCVE-2020-1739Fix available3.9 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary FileCVE-2020-1733Fix available5.0 Medium
- red hat ansible, redhat ansible engine, ansible tower +2 morePath Traversal in AnsibleCVE-2020-1737Fix available7.5 High
- red hat ansible, redhat ansible engine, ansible tower +2 moreOS Command Injection in ansibleCVE-2020-1734Fix available7.4 High
- red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 moreExternally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in AnsibleCVE-2019-14905Fix available7.3 High
- Show moreLoading…