Ansible (Unknown) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2019-11-26. Vendor: Unknown.

CVEs of Ansible

• CVE-2019-14856 - CVSS 6.5 (medium), 2019-11-26: ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None
• CVE-2018-16837 - CVSS 7.8 (high), 2018-10-23: Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases…
• CVE-2017-7481 - CVSS 9.8 (critical), 2018-07-19: Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup()…
• CVE-2018-10875 - CVSS 7.8 (high), 2018-07-13: A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under…
• CVE-2018-10855 - CVSS 5.9 (medium), 2018-07-03: Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect…
• CVE-2018-10874 - CVSS 7.8 (high), 2018-07-02: In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control,…
• CVE-2017-7466 - CVSS 8 (high), 2018-06-22: Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client…