Skip to content
Redhat Ansible Engine vulnerabilities
-
red hat ansible, redhat ansible engine, ansible automation platform early access +7 more +9 more
Ansible discloses sensitive information in traceback error message
CVE-2021-3620
Fix available
5.5 Medium
-
red hat ansible, redhat ansible automation platform, ansible engine +1 more +3 more
Improper Input Validation and Command Injection in Ansible
CVE-2021-3583
Fix available
7.1 High
-
red hat ansible, redhat ansible engine, debian linux +2 more +4 more
Ansible Exposes Sensitive Information
CVE-2021-20228
Fix available
7.5 High
-
red hat ansible, redhat ansible engine, debian linux +2 more
Insufficiently random values in Ansible
CVE-2020-10729
Fix available
5.5 Medium
-
red hat ansible, redhat ansible engine, debian linux +2 more
Insertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible
CVE-2020-14332
Fix available
5.5 Medium
-
red hat ansible, debian linux, redhat ansible engine +2 more
Improper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible
CVE-2020-14330
Fix available
5.0 Medium
-
red hat ansible, redhat ansible engine, debian linux +3 more +5 more
Improper Verification of Cryptographic Signature in ansible
CVE-2020-14365
Fix available
7.1 High
-
red hat ansible, redhat ansible engine, ansible tower +1 more +3 more
Exposure of Sensitive Information to an Unauthorized Actor in ansible
CVE-2020-1746
Fix available
5.0 Medium
-
red hat ansible, redhat ansible engine, ansible tower +4 more +6 more
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
CVE-2020-10685
Fix available
5.0 Medium
-
red hat ansible, redhat ansible engine, ansible tower +2 more
Path Traversal in Ansible
CVE-2020-10691
Fix available
5.2 Medium
-
red hat ansible, redhat ansible engine, debian linux +2 more +4 more
Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
CVE-2020-1753
Fix available
5.0 Medium
-
red hat ansible, redhat ansible engine, ansible tower +2 more
Path Traversal in Ansible
CVE-2020-1737
Fix available
7.5 High
-
red hat ansible, redhat ansible engine, ansible tower +2 more
OS Command Injection in ansible
CVE-2020-1734
Fix available
7.4 High
-
red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 more
Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible
CVE-2019-14905
Fix available
7.3 High
-
red hat ansible, redhat ansible engine, ansible tower +2 more
Ansible leaks sensitive information to logs when told not to
CVE-2019-14858
Fix available
7.3 High
-
red hat ansible, redhat ansible engine, debian linux +3 more +5 more
Ansible Uses Plugins That Disclose Credentials
CVE-2019-14846
Fix available
7.3 High
-
red hat ansible, canonical ubuntu linux, debian linux +6 more +8 more
Ansible sensitive information disclosure
CVE-2018-16876
Fix available
3.1 Low
-
red hat ansible, redhat ansible engine +1 more
Ansible Logs Passwords If PowerShell ScriptBlock is Enabled
CVE-2018-16859
Fix available
4.2 Medium
-
[unknown] ansible, debian linux, redhat ansible engine +2 more +4 more
Ansible Leaks Data Passed to ssh-keygen
CVE-2018-16837
Fix available
7.8 High
-
[unknown] ansible, canonical ubuntu linux, debian linux +8 more +10 more
Ansible Arbitrary Code Execution
CVE-2018-10875
Fix available
7.8 High
-
[unknown] ansible, redhat ansible engine, openstack +2 more +4 more
Ansible Improper Input Validation vulnerability
CVE-2018-10874
Fix available
7.8 High
-
[unknown] ansible, canonical ubuntu linux, debian linux +4 more +6 more
Ansible exposes sensitive data in log files and on the terminal
CVE-2018-10855
Fix available
5.9 Medium
-
paramiko, debian linux, redhat ansible engine +8 more +10 more
Paramiko not properly checking authentication before processing other requests
CVE-2018-7750
Public exploitFix available
EPSS 27.1%
9.8 Critical
-
[unknown] ansible, canonical ubuntu linux, debian linux +7 more +9 more
Ansible fails to properly mark lookup-plugin results as unsafe
CVE-2017-7481
Fix available
5.3 Medium
-
red hat ansible, redhat ansible engine, virtualization +2 more
Improper Input Validation in ansible
CVE-2016-8647
Fix available
2.2 Low