Skip to contentRedhat Ansible vulnerabilities
- red hat ansible, redhat ansible engine, debian linux +3 more +5 moreImproper Verification of Cryptographic Signature in ansibleCVE-2020-14365Fix available7.1 High
- red hat ansible towerA data exposure flaw was found in Tower, where sensitive data was revealed from the HTTP return...CVE-2020-143375.8 Medium
- red hat ansible towerAn exposure of sensitive information flaw was found in Ansible Tower before version 3.7.1....CVE-2020-107826.5 Medium
- red hat ansible, redhat ansible tower +1 moreExposure of Resource to Wrong Sphere and Insecure Temporary File in AnsibleCVE-2020-10744Fix available5.0 Medium
- red hat ansible, redhat ansible engine, ansible tower +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in ansibleCVE-2020-1746Fix available5.0 Medium
- red hat ansible, redhat ansible engine, ansible tower +4 more +6 moreExposure of Resource to Wrong Sphere and Insecure Temporary File in AnsibleCVE-2020-10685Fix available5.0 Medium
- red hat ansible, redhat ansible engine, ansible tower +2 morePath Traversal in AnsibleCVE-2020-10691Fix available5.2 Medium
- red hat ansible, debian linux, fedoraproject fedora +2 more +4 moreCode Injection, Race Condition, and Execution with Unnecessary Privileges in AnsibleCVE-2020-10684Fix available7.9 High
- red hat ansible, redhat ansible tower, cloudforms management engine +1 more +3 moreArgument Injection in AnsibleCVE-2020-1738Fix available3.9 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in AnsibleCVE-2020-1740Fix available3.9 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 morePath Traversal in AnsibleCVE-2020-1735Fix available4.2 Medium
- red hat ansible, fedoraproject fedora, redhat ansible tower +2 more +4 moreIncorrect Permission Assignment for Critical Resource in AnsibleCVE-2020-1736Fix available2.2 Low
- red hat ansible, redhat ansible engine, debian linux +2 more +4 moreInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in AnsibleCVE-2020-1753Fix available5.0 Medium
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor in AnsibleCVE-2020-1739Fix available3.9 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary FileCVE-2020-1733Fix available5.0 Medium
- red hat ansible, redhat ansible engine, ansible tower +2 morePath Traversal in AnsibleCVE-2020-1737Fix available7.5 High
- red hat ansible, redhat ansible engine, ansible tower +2 moreOS Command Injection in ansibleCVE-2020-1734Fix available7.4 High
- redhat ansibleAnsible sets unsafe permissions for sources.listCVE-2014-4659Fix available5.5 Medium
- redhat ansibleAnsible Sensitive Files Are Locally ReadableCVE-2014-4658Fix available5.5 Medium
- redhat ansibleAnsible Remote Code ExecutionCVE-2014-4657Fix available9.8 Critical
- redhat ansibleAnsible discloses credential informationCVE-2014-4660Fix available5.5 Medium
- red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 moreExternally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in AnsibleCVE-2019-14905Fix available7.3 High
- red hat ansible, debian linux +1 moreOS Command Injection and Improper Input Validation in ansibleCVE-2019-14904Fix available7.3 High
- redhat ansibleAnsible unsafe evaluation of some stringsCVE-2014-2686Fix available7.5 High
- red hat tower, redhat ansible tower +1 moreA flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower...CVE-2019-193415.9 Medium
- red hat tower, redhat ansible tower +1 moreA flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when ...CVE-2019-193425.3 Medium
- red hat tower, redhat ansible tower, enterprise linux +2 moreA flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where...CVE-2019-193408.2 High
- red hat ansible, debian linux, opensuse backports sle +5 more +7 moreInclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in AnsibleCVE-2019-14864Fix available5.7 Medium
- [unknown] ansible, opensuse backports sle, leap +1 more +3 moreAnsible password prompts could expose passwordsCVE-2019-14856Fix available6.4 Medium
- [unknown] tower, redhat ansible tower +1 moreAn attacker with low privilege could retrieve usernames and passwords credentials from the new...CVE-2019-148908.4 High
- red hat ansibleExposure of Sensitive Information to an Unauthorized Actor in ansibleCVE-2019-10217Fix available5.7 Medium
- red hat ansible, redhat ansible engine, ansible tower +2 moreAnsible leaks sensitive information to logs when told not toCVE-2019-14858Fix available7.3 High
- red hat ansible, redhat ansible engine, debian linux +3 more +5 moreAnsible Uses Plugins That Disclose CredentialsCVE-2019-14846Fix available7.3 High
- red hat ansible, debian linux, opensuse backports sle +1 more +3 moreAnsible password prompts could expose passwordsCVE-2019-10206Fix available6.4 Medium
- red hat ansible, debian linux, redhat openstack +2 moreExposure of Sensitive Information to an Unauthorized Actor in ansibleCVE-2019-10156Fix available4.6 Medium
- red hat tower, redhat ansible tower +1 moreWhen running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed...CVE-2019-38697.2 High
- artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 moreIt was found that the forceput operator could be extracted from the DefineResource method in...CVE-2019-3838Fix available7.3 High
- artifex ghostscript, debian linux, fedoraproject fedora +8 more +10 moreIt was found that the superexec operator was available in the internal dictionary in ghostscript...CVE-2019-3835Fix available7.3 High
- red hat ansibleAnsible Path Traversal vulnerabilityCVE-2019-3828Fix available4.2 Medium
- red hat ansible, canonical ubuntu linux, debian linux +6 more +8 moreAnsible sensitive information disclosureCVE-2018-16876Fix available3.1 Low
- [unknown] tower, redhat ansible tower +1 moreAnsible Tower before version 3.3.3 does not set a secure channel as it is using the default...CVE-2018-168797.3 High
- red hat ansible, redhat ansible engine +1 moreAnsible Logs Passwords If PowerShell ScriptBlock is EnabledCVE-2018-16859Fix available4.2 Medium
- [unknown] ansible, debian linux, redhat ansible engine +2 more +4 moreAnsible Leaks Data Passed to ssh-keygenCVE-2018-16837Fix available7.8 High
- paramiko, canonical ubuntu linux, debian linux +8 more +10 moreParamiko Authentication Bypass vulnerabilityCVE-2018-1000805Fix available8.8 High
- git-scm git, canonical ubuntu linux, debian linux +8 more +10 moreGit before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x...CVE-2018-17456Public exploitFix availableEPSS 97.4%9.8 Critical
- red hat ansible towerA privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a...CVE-2016-70708.0 High
- red hat ansible tower, redhat cloudforms management engine +1 moreAnsible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF...CVE-2017-75285.2 Medium
- redhat ansible tower, red hat ansible-tower +1 moreAnsible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF)...CVE-2018-108848.8 High
- x libxcursor, canonical ubuntu linux, debian linux +4 more +6 more_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause...CVE-2015-9262Fix available9.8 Critical
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...CVE-2018-14682Fix available8.8 High
- Show moreLoading…