Ansible Runner (Redhat) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 48 known versions, newest CVE from 2022-08-24. Vendor: Redhat.

CVEs of Ansible Runner

• CVE-2021-4041 - CVSS 7.8 (high), 2022-08-24: A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansible_runner.interface.run_command, can lead to parameters…
• CVE-2021-3702 - CVSS 6.3 (medium), 2022-08-23: A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute their…
• CVE-2021-3701 - CVSS 6.6 (medium), 2022-08-23: A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an…