| 0 |
| url |
VCID-3jxq-kxnz-6bfh |
| vulnerability_id |
VCID-3jxq-kxnz-6bfh |
| summary |
A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to confidentiality. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
|
| fixed_packages |
|
| aliases |
CVE-2021-20228, GHSA-5rrg-rr89-x9mv, PYSEC-2021-1
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-3jxq-kxnz-6bfh |
|
| 1 |
| url |
VCID-4331-d5yy-uybc |
| vulnerability_id |
VCID-4331-d5yy-uybc |
| summary |
A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask 77 && mkdir -p <dir>"; this operation does not fail if the directory already exists and is owned by another user. An attacker could take advantage to gain control of the become user as the target directory can be retrieved by iterating '/proc/<pid>/cmdline'. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.7.17 |
| purl |
pkg:pypi/ansible@2.7.17 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 6 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 12 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17 |
|
| 1 |
| url |
pkg:pypi/ansible@2.8.8 |
| purl |
pkg:pypi/ansible@2.8.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 5 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 6 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 7 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 8 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 9 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 10 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 11 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 12 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 13 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 14 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 15 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 16 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 17 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 18 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 19 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 20 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 21 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.8 |
|
| 2 |
| url |
pkg:pypi/ansible@2.9.6 |
| purl |
pkg:pypi/ansible@2.9.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 6 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 15 |
| vulnerability |
VCID-ydka-2etb-hue9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6 |
|
|
| aliases |
CVE-2020-1733, GHSA-g4mq-6fp5-qwcf, PYSEC-2020-5
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4331-d5yy-uybc |
|
| 2 |
| url |
VCID-46yu-yqv4-1ugb |
| vulnerability_id |
VCID-46yu-yqv4-1ugb |
| summary |
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.6.20 |
| purl |
pkg:pypi/ansible@2.6.20 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 3 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 4 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 5 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 6 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 7 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 8 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 9 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 10 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 11 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 12 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 13 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 14 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 15 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 16 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 17 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 18 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 19 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 20 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.20 |
|
| 1 |
| url |
pkg:pypi/ansible@2.7.14 |
| purl |
pkg:pypi/ansible@2.7.14 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 6 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 7 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 8 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 9 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 10 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 11 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 12 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 13 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 14 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 15 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 16 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 17 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 18 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 19 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 20 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 21 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 22 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 23 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 24 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 25 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 26 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 27 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
| 28 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.14 |
|
| 2 |
| url |
pkg:pypi/ansible@2.8.6 |
| purl |
pkg:pypi/ansible@2.8.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 6 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 7 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 8 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 9 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 10 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 11 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 12 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 13 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 14 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 15 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 16 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 17 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 18 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 19 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 20 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 21 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 22 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 23 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 24 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 25 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 26 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 27 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.6 |
|
|
| aliases |
PYSEC-2019-74
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-46yu-yqv4-1ugb |
|
| 3 |
|
| 4 |
| url |
VCID-6hdk-ywcn-4qe4 |
| vulnerability_id |
VCID-6hdk-ywcn-4qe4 |
| summary |
A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl from the command line, not using an environment variable or an input configuration file. This will disclose passwords and tokens from process list and no_log directive from debug module would not have any effect making these secrets being disclosed on stdout and log files. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.7.18 |
| purl |
pkg:pypi/ansible@2.7.18 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 3 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 4 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 5 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 6 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 7 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 8 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 9 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 10 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 11 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.18 |
|
| 1 |
| url |
pkg:pypi/ansible@2.8.11 |
| purl |
pkg:pypi/ansible@2.8.11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 3 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 6 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 7 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 8 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 9 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 10 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 11 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11 |
|
| 2 |
| url |
pkg:pypi/ansible@2.9.7 |
| purl |
pkg:pypi/ansible@2.9.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 3 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 4 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 5 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 6 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 7 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 8 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 9 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 10 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7 |
|
|
| aliases |
CVE-2020-1753, GHSA-86hp-cj9j-33vv, PYSEC-2020-210
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| url |
VCID-6smx-ju23-8qes |
| vulnerability_id |
VCID-6smx-ju23-8qes |
| summary |
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.6.20 |
| purl |
pkg:pypi/ansible@2.6.20 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 3 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 4 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 5 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 6 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 7 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 8 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 9 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 10 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 11 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 12 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 13 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 14 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 15 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 16 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 17 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 18 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 19 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 20 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.20 |
|
| 1 |
| url |
pkg:pypi/ansible@2.7.14 |
| purl |
pkg:pypi/ansible@2.7.14 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 6 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 7 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 8 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 9 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 10 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 11 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 12 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 13 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 14 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 15 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 16 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 17 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 18 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 19 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 20 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 21 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 22 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 23 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 24 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 25 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 26 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 27 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
| 28 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.14 |
|
| 2 |
| url |
pkg:pypi/ansible@2.8.6 |
| purl |
pkg:pypi/ansible@2.8.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 6 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 7 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 8 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 9 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 10 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 11 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 12 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 13 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 14 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 15 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 16 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 17 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 18 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 19 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 20 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 21 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 22 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 23 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 24 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 25 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 26 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 27 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.6 |
|
| 3 |
|
|
| aliases |
CVE-2019-14846, GHSA-pm48-cvv2-29q5, PYSEC-2019-4
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6smx-ju23-8qes |
|
| 6 |
| url |
VCID-6swz-79ue-bbef |
| vulnerability_id |
VCID-6swz-79ue-bbef |
| summary |
A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitrary commands by overwriting the ansible facts. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.7.17 |
| purl |
pkg:pypi/ansible@2.7.17 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 6 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 12 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17 |
|
| 1 |
| url |
pkg:pypi/ansible@2.8.13 |
| purl |
pkg:pypi/ansible@2.8.13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 3 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 6 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 7 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 8 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 9 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 10 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.13 |
|
| 2 |
|
| 3 |
|
|
| aliases |
CVE-2020-1734, GHSA-h39q-95q5-9jfp, PYSEC-2020-6
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6swz-79ue-bbef |
|
| 7 |
| url |
VCID-826d-vdw1-dbaj |
| vulnerability_id |
VCID-826d-vdw1-dbaj |
| summary |
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just to the process list. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.5.11 |
| purl |
pkg:pypi/ansible@2.5.11 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 5 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 6 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 7 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 8 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 9 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 10 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 11 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 12 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 13 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 14 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 15 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 16 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 17 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 18 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 19 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 20 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 21 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 22 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 23 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 24 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 25 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 26 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 27 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 28 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.11 |
|
| 1 |
| url |
pkg:pypi/ansible@2.6.7 |
| purl |
pkg:pypi/ansible@2.6.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 3 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 4 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 5 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 6 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 7 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 8 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 9 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 10 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 11 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 12 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 13 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 14 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 15 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 16 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 17 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 18 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 19 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 20 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 21 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 24 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 25 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 26 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 27 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 28 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 29 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 30 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.7 |
|
| 2 |
| url |
pkg:pypi/ansible@2.7.1 |
| purl |
pkg:pypi/ansible@2.7.1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 3 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 4 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 5 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 6 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 7 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 8 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 9 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 10 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 11 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 12 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 13 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 14 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 15 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 16 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 17 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 18 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 19 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 20 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 21 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 22 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 23 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 24 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 25 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 26 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 27 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 28 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 29 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 30 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 31 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 32 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 33 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 34 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 35 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 36 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
| 37 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.1 |
|
|
| aliases |
CVE-2018-16837, GHSA-hwrm-63v2-42g4, PYSEC-2018-44
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-826d-vdw1-dbaj |
|
| 8 |
| url |
VCID-95kg-bk3s-g7gx |
| vulnerability_id |
VCID-95kg-bk3s-g7gx |
| summary |
A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords are exposed at once for the file. This flaw affects Ansible Engine versions before 2.9.6. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.9.6 |
| purl |
pkg:pypi/ansible@2.9.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 6 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 15 |
| vulnerability |
VCID-ydka-2etb-hue9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6 |
|
|
| aliases |
CVE-2020-10729, GHSA-r6h7-5pq2-j77h, PYSEC-2021-105
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-95kg-bk3s-g7gx |
|
| 9 |
| url |
VCID-a79h-gfcm-13cq |
| vulnerability_id |
VCID-a79h-gfcm-13cq |
| summary |
A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.4.1.0 |
| purl |
pkg:pypi/ansible@2.4.1.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 6 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 7 |
| vulnerability |
VCID-826d-vdw1-dbaj |
|
| 8 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 9 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 10 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 11 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 12 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 13 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 14 |
| vulnerability |
VCID-ce7n-7xet-pyav |
|
| 15 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 16 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 17 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 18 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 19 |
| vulnerability |
VCID-kva6-sjfx-rbe3 |
|
| 20 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 21 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 22 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 23 |
| vulnerability |
VCID-qbws-64b9-83fc |
|
| 24 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 25 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 26 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 27 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 28 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 29 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 30 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.1.0 |
|
|
| aliases |
CVE-2017-7550, GHSA-588w-w6mv-3cw5, PYSEC-2017-4
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-a79h-gfcm-13cq |
|
| 10 |
| url |
VCID-axds-bd49-fbdj |
| vulnerability_id |
VCID-axds-bd49-fbdj |
| summary |
A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.7.15 |
| purl |
pkg:pypi/ansible@2.7.15 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 6 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 7 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 8 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 9 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 10 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 11 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 12 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 13 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 14 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 15 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 16 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 17 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 18 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 19 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 20 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 21 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 22 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 23 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 24 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
| 25 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.15 |
|
| 1 |
| url |
pkg:pypi/ansible@2.8.7 |
| purl |
pkg:pypi/ansible@2.8.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 6 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 7 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 8 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 9 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 10 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 11 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 12 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 13 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 14 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 15 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 16 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 17 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 18 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 19 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 20 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 21 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 22 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 23 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 24 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.7 |
|
| 2 |
| url |
pkg:pypi/ansible@2.9.2 |
| purl |
pkg:pypi/ansible@2.9.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 6 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 7 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 8 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 9 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 10 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 11 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 12 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 13 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 14 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 15 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 16 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 17 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 18 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 19 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 20 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 21 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 22 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 23 |
| vulnerability |
VCID-ydka-2etb-hue9 |
|
| 24 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.2 |
|
|
| aliases |
CVE-2019-14904, GHSA-gwr8-5j83-483c, PYSEC-2020-161
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-axds-bd49-fbdj |
|
| 11 |
| url |
VCID-b423-t4kx-eqbq |
| vulnerability_id |
VCID-b423-t4kx-eqbq |
| summary |
A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.7.17 |
| purl |
pkg:pypi/ansible@2.7.17 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 6 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 12 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17 |
|
| 1 |
| url |
pkg:pypi/ansible@2.8.9 |
| purl |
pkg:pypi/ansible@2.8.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 5 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 6 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 7 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 8 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 9 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 10 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 11 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9 |
|
| 2 |
| url |
pkg:pypi/ansible@2.9.6 |
| purl |
pkg:pypi/ansible@2.9.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 6 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 15 |
| vulnerability |
VCID-ydka-2etb-hue9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6 |
|
|
| aliases |
CVE-2020-1735, GHSA-gfr2-qpxh-qj9m, PYSEC-2020-7
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-b423-t4kx-eqbq |
|
| 12 |
| url |
VCID-b8cv-v25q-1kh3 |
| vulnerability_id |
VCID-b8cv-v25q-1kh3 |
| summary |
An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2020-14330, GHSA-785x-qw4v-6872, PYSEC-2020-3
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-b8cv-v25q-1kh3 |
|
| 13 |
| url |
VCID-bmq3-uckn-tfhk |
| vulnerability_id |
VCID-bmq3-uckn-tfhk |
| summary |
Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.5.15 |
| purl |
pkg:pypi/ansible@2.5.15 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 6 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 7 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 8 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 9 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 10 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 11 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 12 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 13 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 14 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 15 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 16 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 17 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 18 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 19 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 20 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 21 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 22 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 23 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 24 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.15 |
|
| 1 |
| url |
pkg:pypi/ansible@2.6.14 |
| purl |
pkg:pypi/ansible@2.6.14 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 5 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 6 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 7 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 8 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 9 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 10 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 11 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 12 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 13 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 14 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 15 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 16 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 17 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 18 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 19 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 20 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 21 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 22 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 23 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 24 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 25 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 26 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.14 |
|
| 2 |
| url |
pkg:pypi/ansible@2.7.8 |
| purl |
pkg:pypi/ansible@2.7.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 5 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 6 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 7 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 8 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 9 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 10 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 11 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 12 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 13 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 14 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 15 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 16 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 17 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 18 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 19 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 20 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 21 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 24 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 25 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 26 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 27 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 28 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 29 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 30 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 31 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 32 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 33 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
| 34 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.8 |
|
|
| aliases |
CVE-2019-3828, GHSA-74vq-h4q8-x6jv, PYSEC-2019-5
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.7 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bmq3-uckn-tfhk |
|
| 14 |
| url |
VCID-brft-snn6-guc8 |
| vulnerability_id |
VCID-brft-snn6-guc8 |
| summary |
A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path traversal. This issue is fixed in 2.10. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.7.17 |
| purl |
pkg:pypi/ansible@2.7.17 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 6 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 12 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17 |
|
| 1 |
| url |
pkg:pypi/ansible@2.8.9 |
| purl |
pkg:pypi/ansible@2.8.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 5 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 6 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 7 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 8 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 9 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 10 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 11 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9 |
|
| 2 |
| url |
pkg:pypi/ansible@2.9.6 |
| purl |
pkg:pypi/ansible@2.9.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 6 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 15 |
| vulnerability |
VCID-ydka-2etb-hue9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6 |
|
|
| aliases |
CVE-2020-1737, GHSA-893h-35v4-mxqx, PYSEC-2020-9
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-brft-snn6-guc8 |
|
| 15 |
| url |
VCID-ce7n-7xet-pyav |
| vulnerability_id |
VCID-ce7n-7xet-pyav |
| summary |
Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive data passed to a task from being logged, and that task does not run successfully, Ansible will expose sensitive data in log files and on the terminal of the user running Ansible. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.4.5.0 |
| purl |
pkg:pypi/ansible@2.4.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 6 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 7 |
| vulnerability |
VCID-826d-vdw1-dbaj |
|
| 8 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 9 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 10 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 11 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 12 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 13 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 14 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 15 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 16 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 17 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 18 |
| vulnerability |
VCID-kva6-sjfx-rbe3 |
|
| 19 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 20 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 21 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 22 |
| vulnerability |
VCID-qbws-64b9-83fc |
|
| 23 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 24 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 25 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 26 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 27 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 28 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 29 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.5.0 |
|
| 1 |
| url |
pkg:pypi/ansible@2.5.5 |
| purl |
pkg:pypi/ansible@2.5.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 5 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 6 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 7 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 8 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 9 |
| vulnerability |
VCID-826d-vdw1-dbaj |
|
| 10 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 11 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 12 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 13 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 14 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 15 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 16 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 17 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 18 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 19 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 20 |
| vulnerability |
VCID-kva6-sjfx-rbe3 |
|
| 21 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 24 |
| vulnerability |
VCID-qbws-64b9-83fc |
|
| 25 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 26 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 27 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 28 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 29 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 30 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 31 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.5 |
|
|
| aliases |
CVE-2018-10855, GHSA-jwcc-j78w-j73w, PYSEC-2018-42
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ce7n-7xet-pyav |
|
| 16 |
|
| 17 |
| url |
VCID-gnq4-v5a7-m3ew |
| vulnerability_id |
VCID-gnq4-v5a7-m3ew |
| summary |
A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to the module will cause the task to fail before the no_log options in the sub parameters are processed. As a result, data in the sub parameter fields will not be masked and will be displayed if Ansible is run with increased verbosity and present in the module invocation arguments for the task. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.8.1 |
| purl |
pkg:pypi/ansible@2.8.1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 5 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 6 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 7 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 8 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 9 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 10 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 11 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 12 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 13 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 14 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 15 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 16 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 17 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 18 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 19 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 20 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 21 |
| vulnerability |
VCID-mk3k-n9wn-q3ct |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 24 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 25 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 26 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 27 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 28 |
| vulnerability |
VCID-sdv2-h8d8-9ydj |
|
| 29 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 30 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 31 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 32 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 33 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 34 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 35 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.1 |
|
|
| aliases |
CVE-2019-14858, GHSA-h653-95qw-h2mp, PYSEC-2019-171
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gnq4-v5a7-m3ew |
|
| 18 |
| url |
VCID-hyr1-b223-bkef |
| vulnerability_id |
VCID-hyr1-b223-bkef |
| summary |
A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions before the move. This could lead to the disclosure of sensitive data. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.7.17 |
| purl |
pkg:pypi/ansible@2.7.17 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 6 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 12 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17 |
|
| 1 |
| url |
pkg:pypi/ansible@2.8.9 |
| purl |
pkg:pypi/ansible@2.8.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 5 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 6 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 7 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 8 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 9 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 10 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 11 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9 |
|
| 2 |
| url |
pkg:pypi/ansible@2.9.6 |
| purl |
pkg:pypi/ansible@2.9.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 6 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 15 |
| vulnerability |
VCID-ydka-2etb-hue9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6 |
|
|
| aliases |
CVE-2020-1736, GHSA-x7jh-595q-wq82, PYSEC-2020-8
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hyr1-b223-bkef |
|
| 19 |
|
| 20 |
| url |
VCID-kva6-sjfx-rbe3 |
| vulnerability_id |
VCID-kva6-sjfx-rbe3 |
| summary |
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.4.6.0 |
| purl |
pkg:pypi/ansible@2.4.6.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 6 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 7 |
| vulnerability |
VCID-826d-vdw1-dbaj |
|
| 8 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 9 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 10 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 11 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 12 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 13 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 14 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 15 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 16 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 17 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 18 |
| vulnerability |
VCID-kva6-sjfx-rbe3 |
|
| 19 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 20 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 21 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 22 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 23 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 24 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 25 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 26 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 27 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 28 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.6.0 |
|
| 1 |
| url |
pkg:pypi/ansible@2.5.6 |
| purl |
pkg:pypi/ansible@2.5.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 5 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 6 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 7 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 8 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 9 |
| vulnerability |
VCID-826d-vdw1-dbaj |
|
| 10 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 11 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 12 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 13 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 14 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 15 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 16 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 17 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 18 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 19 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 20 |
| vulnerability |
VCID-kva6-sjfx-rbe3 |
|
| 21 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 24 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 25 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 26 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 27 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 28 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 29 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 30 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.6 |
|
| 2 |
| url |
pkg:pypi/ansible@2.6.1 |
| purl |
pkg:pypi/ansible@2.6.1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 3 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 4 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 5 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 6 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 7 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 8 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 9 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 10 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 11 |
| vulnerability |
VCID-826d-vdw1-dbaj |
|
| 12 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 13 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 14 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 15 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 16 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 17 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 18 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 19 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 20 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 21 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 22 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 23 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 24 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 25 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 26 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 27 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 28 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 29 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 30 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 31 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.1 |
|
|
| aliases |
CVE-2018-10875, GHSA-fc4h-467w-46rh, PYSEC-2018-43
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kva6-sjfx-rbe3 |
|
| 21 |
| url |
VCID-m87b-eb5y-8ydf |
| vulnerability_id |
VCID-m87b-eb5y-8ydf |
| summary |
A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2020-25635, GHSA-f556-49jc-4rvc, PYSEC-2020-220
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-m87b-eb5y-8ydf |
|
| 22 |
| url |
VCID-n2b8-e8fa-2ue1 |
| vulnerability_id |
VCID-n2b8-e8fa-2ue1 |
| summary |
A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.7.17 |
| purl |
pkg:pypi/ansible@2.7.17 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 6 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 12 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17 |
|
| 1 |
| url |
pkg:pypi/ansible@2.8.9 |
| purl |
pkg:pypi/ansible@2.8.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 5 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 6 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 7 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 8 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 9 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 10 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 11 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9 |
|
| 2 |
| url |
pkg:pypi/ansible@2.9.6 |
| purl |
pkg:pypi/ansible@2.9.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 6 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 15 |
| vulnerability |
VCID-ydka-2etb-hue9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6 |
|
|
| aliases |
CVE-2020-1740, GHSA-vcg8-98q8-g7mj, PYSEC-2020-12
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| url |
VCID-p6cz-c9ah-c7cp |
| vulnerability_id |
VCID-p6cz-c9ah-c7cp |
| summary |
A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.7.15 |
| purl |
pkg:pypi/ansible@2.7.15 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 6 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 7 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 8 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 9 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 10 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 11 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 12 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 13 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 14 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 15 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 16 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 17 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 18 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 19 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 20 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 21 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 22 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 23 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 24 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
| 25 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.15 |
|
| 1 |
| url |
pkg:pypi/ansible@2.8.7 |
| purl |
pkg:pypi/ansible@2.8.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 6 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 7 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 8 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 9 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 10 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 11 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 12 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 13 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 14 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 15 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 16 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 17 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 18 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 19 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 20 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 21 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 22 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 23 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 24 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.7 |
|
| 2 |
| url |
pkg:pypi/ansible@2.9.2 |
| purl |
pkg:pypi/ansible@2.9.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 6 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 7 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 8 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 9 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 10 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 11 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 12 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 13 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 14 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 15 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 16 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 17 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 18 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 19 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 20 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 21 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 22 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 23 |
| vulnerability |
VCID-ydka-2etb-hue9 |
|
| 24 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.2 |
|
|
| aliases |
PYSEC-2020-180
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-p6cz-c9ah-c7cp |
|
| 24 |
| url |
VCID-qbws-64b9-83fc |
| vulnerability_id |
VCID-qbws-64b9-83fc |
| summary |
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.4.6.0 |
| purl |
pkg:pypi/ansible@2.4.6.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 6 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 7 |
| vulnerability |
VCID-826d-vdw1-dbaj |
|
| 8 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 9 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 10 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 11 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 12 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 13 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 14 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 15 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 16 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 17 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 18 |
| vulnerability |
VCID-kva6-sjfx-rbe3 |
|
| 19 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 20 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 21 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 22 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 23 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 24 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 25 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 26 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 27 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 28 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.6.0 |
|
| 1 |
| url |
pkg:pypi/ansible@2.5.6 |
| purl |
pkg:pypi/ansible@2.5.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 5 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 6 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 7 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 8 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 9 |
| vulnerability |
VCID-826d-vdw1-dbaj |
|
| 10 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 11 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 12 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 13 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 14 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 15 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 16 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 17 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 18 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 19 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 20 |
| vulnerability |
VCID-kva6-sjfx-rbe3 |
|
| 21 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 24 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 25 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 26 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 27 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 28 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 29 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 30 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.6 |
|
| 2 |
| url |
pkg:pypi/ansible@2.6.1 |
| purl |
pkg:pypi/ansible@2.6.1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 3 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 4 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 5 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 6 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 7 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 8 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 9 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 10 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 11 |
| vulnerability |
VCID-826d-vdw1-dbaj |
|
| 12 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 13 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 14 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 15 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 16 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 17 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 18 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 19 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 20 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 21 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 22 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 23 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 24 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 25 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 26 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 27 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 28 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 29 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 30 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 31 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.1 |
|
|
| aliases |
CVE-2018-10874, GHSA-3xvg-x47j-x75w, PYSEC-2018-81
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qbws-64b9-83fc |
|
| 25 |
|
| 26 |
| url |
VCID-rarq-tdjt-hff3 |
| vulnerability_id |
VCID-rarq-tdjt-hff3 |
| summary |
A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.7.17 |
| purl |
pkg:pypi/ansible@2.7.17 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 6 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 12 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17 |
|
| 1 |
| url |
pkg:pypi/ansible@2.8.9 |
| purl |
pkg:pypi/ansible@2.8.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 5 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 6 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 7 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 8 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 9 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 10 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 11 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9 |
|
| 2 |
| url |
pkg:pypi/ansible@2.9.6 |
| purl |
pkg:pypi/ansible@2.9.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 6 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 15 |
| vulnerability |
VCID-ydka-2etb-hue9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6 |
|
|
| aliases |
CVE-2020-1738, GHSA-f85h-23mf-2fwh, PYSEC-2020-10
|
| risk_score |
1.4 |
| exploitability |
0.5 |
| weighted_severity |
2.7 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-rarq-tdjt-hff3 |
|
| 27 |
| url |
VCID-rnub-zmb6-5yhw |
| vulnerability_id |
VCID-rnub-zmb6-5yhw |
| summary |
A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.7.17 |
| purl |
pkg:pypi/ansible@2.7.17 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 6 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 12 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17 |
|
| 1 |
| url |
pkg:pypi/ansible@2.8.9 |
| purl |
pkg:pypi/ansible@2.8.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 5 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 6 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 7 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 8 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 9 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 10 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 11 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9 |
|
| 2 |
| url |
pkg:pypi/ansible@2.9.6 |
| purl |
pkg:pypi/ansible@2.9.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 2 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 3 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 4 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 5 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 6 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 7 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 8 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 9 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 10 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 11 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 12 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 13 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 14 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 15 |
| vulnerability |
VCID-ydka-2etb-hue9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6 |
|
|
| aliases |
CVE-2020-1739, GHSA-923p-fr2c-g5m2, PYSEC-2020-11
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-rnub-zmb6-5yhw |
|
| 28 |
| url |
VCID-smbs-h4tr-3qbv |
| vulnerability_id |
VCID-smbs-h4tr-3qbv |
| summary |
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
| 27 |
|
| 28 |
|
| 29 |
|
| 30 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.4.1.0 |
| purl |
pkg:pypi/ansible@2.4.1.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 2 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 3 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 4 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 5 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 6 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 7 |
| vulnerability |
VCID-826d-vdw1-dbaj |
|
| 8 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 9 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 10 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 11 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 12 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 13 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 14 |
| vulnerability |
VCID-ce7n-7xet-pyav |
|
| 15 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 16 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 17 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 18 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 19 |
| vulnerability |
VCID-kva6-sjfx-rbe3 |
|
| 20 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 21 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 22 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 23 |
| vulnerability |
VCID-qbws-64b9-83fc |
|
| 24 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 25 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 26 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 27 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 28 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 29 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 30 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.1.0 |
|
|
| aliases |
CVE-2018-7750, GHSA-232r-66cg-79px, PYSEC-2018-19
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-smbs-h4tr-3qbv |
|
| 29 |
|
| 30 |
| url |
VCID-xk7s-y611-mffc |
| vulnerability_id |
VCID-xk7s-y611-mffc |
| summary |
A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.6.18 |
| purl |
pkg:pypi/ansible@2.6.18 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 5 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 6 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 7 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 8 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 9 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 10 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 11 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 12 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 13 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 14 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 15 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 16 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 17 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 18 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 19 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 20 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 21 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 22 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 23 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 24 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.18 |
|
| 1 |
| url |
pkg:pypi/ansible@2.7.12 |
| purl |
pkg:pypi/ansible@2.7.12 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 5 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 6 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 7 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 8 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 9 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 10 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 11 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 12 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 13 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 14 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 15 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 16 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 17 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 18 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 19 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 20 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 21 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 24 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 25 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 26 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 27 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 28 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 29 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 30 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 31 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
| 32 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.12 |
|
| 2 |
| url |
pkg:pypi/ansible@2.8.2 |
| purl |
pkg:pypi/ansible@2.8.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 5 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 6 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 7 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 8 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 9 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 10 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 11 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 12 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 13 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 14 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 15 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 16 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 17 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 18 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 19 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 20 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 21 |
| vulnerability |
VCID-mk3k-n9wn-q3ct |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 24 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 25 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 26 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 27 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 28 |
| vulnerability |
VCID-sdv2-h8d8-9ydj |
|
| 29 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 30 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 31 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 32 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 33 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.2 |
|
|
| aliases |
PYSEC-2019-72
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xk7s-y611-mffc |
|
| 31 |
| url |
VCID-xn7b-vz2e-6qdh |
| vulnerability_id |
VCID-xn7b-vz2e-6qdh |
| summary |
A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.6.18 |
| purl |
pkg:pypi/ansible@2.6.18 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 5 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 6 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 7 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 8 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 9 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 10 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 11 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 12 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 13 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 14 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 15 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 16 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 17 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 18 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 19 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 20 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 21 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 22 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 23 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 24 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.18 |
|
| 1 |
| url |
pkg:pypi/ansible@2.7.12 |
| purl |
pkg:pypi/ansible@2.7.12 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 5 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 6 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 7 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 8 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 9 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 10 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 11 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 12 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 13 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 14 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 15 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 16 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 17 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 18 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 19 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 20 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 21 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 24 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 25 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 26 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 27 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 28 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 29 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 30 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 31 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
| 32 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.12 |
|
| 2 |
| url |
pkg:pypi/ansible@2.8.2 |
| purl |
pkg:pypi/ansible@2.8.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 5 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 6 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 7 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 8 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 9 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 10 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 11 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 12 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 13 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 14 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 15 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 16 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 17 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 18 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 19 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 20 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 21 |
| vulnerability |
VCID-mk3k-n9wn-q3ct |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 24 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 25 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 26 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 27 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 28 |
| vulnerability |
VCID-sdv2-h8d8-9ydj |
|
| 29 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 30 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 31 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 32 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 33 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.2 |
|
|
| aliases |
CVE-2019-10156, GHSA-grgm-pph5-j5h7, PYSEC-2019-2
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xn7b-vz2e-6qdh |
|
| 32 |
| url |
VCID-zcmk-4k97-kkd9 |
| vulnerability_id |
VCID-zcmk-4k97-kkd9 |
| summary |
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/ansible@2.5.12 |
| purl |
pkg:pypi/ansible@2.5.12 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 5 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 6 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 7 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 8 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 9 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 10 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 11 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 12 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 13 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 14 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 15 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 16 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 17 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 18 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 19 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 20 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 21 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 22 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 23 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 24 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 25 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 26 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 27 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 28 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.12 |
|
| 1 |
| url |
pkg:pypi/ansible@2.5.13 |
| purl |
pkg:pypi/ansible@2.5.13 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 1 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 5 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 6 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 7 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 8 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 9 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 10 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 11 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 12 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 13 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 14 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 15 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 16 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 17 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 18 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 19 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 20 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 21 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 22 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 23 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 24 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 25 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 26 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 27 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.13 |
|
| 2 |
| url |
pkg:pypi/ansible@2.6.9 |
| purl |
pkg:pypi/ansible@2.6.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 3 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 4 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 5 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 6 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 7 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 8 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 9 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 10 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 11 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 12 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 13 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 14 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 15 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 16 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 17 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 18 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 19 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 20 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 21 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 24 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 25 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 26 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 27 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 28 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 29 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 30 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.9 |
|
| 3 |
| url |
pkg:pypi/ansible@2.6.10 |
| purl |
pkg:pypi/ansible@2.6.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 3 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 4 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 5 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 6 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 7 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 8 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 9 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 10 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 11 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 12 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 13 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 14 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 15 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 16 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 17 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 18 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 19 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 20 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 21 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 24 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 25 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 26 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 27 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 28 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 29 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.10 |
|
| 4 |
| url |
pkg:pypi/ansible@2.7.3 |
| purl |
pkg:pypi/ansible@2.7.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 3 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 4 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 5 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 6 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 7 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 8 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 9 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 10 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 11 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 12 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 13 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 14 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 15 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 16 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 17 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 18 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 19 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 20 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 21 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 22 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 23 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 24 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 25 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 26 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 27 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 28 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 29 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 30 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 31 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 32 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 33 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 34 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 35 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 36 |
| vulnerability |
VCID-zcmk-4k97-kkd9 |
|
| 37 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.3 |
|
| 5 |
| url |
pkg:pypi/ansible@2.7.4 |
| purl |
pkg:pypi/ansible@2.7.4 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-3v1a-j6eq-57dk |
|
| 3 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 4 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 5 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 6 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 7 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 8 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 9 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 10 |
| vulnerability |
VCID-6swz-79ue-bbef |
|
| 11 |
| vulnerability |
VCID-7f2g-zz9p-sufc |
|
| 12 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 13 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 14 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 15 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 16 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 17 |
| vulnerability |
VCID-bmq3-uckn-tfhk |
|
| 18 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 19 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 20 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 21 |
| vulnerability |
VCID-gnq4-v5a7-m3ew |
|
| 22 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 23 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 24 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 25 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 26 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 27 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 28 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 29 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 30 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 31 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 32 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 33 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 34 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 35 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 36 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.4 |
|
| 6 |
| url |
pkg:pypi/ansible@2.8.1 |
| purl |
pkg:pypi/ansible@2.8.1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-39vn-b7y4-v3ez |
|
| 1 |
| vulnerability |
VCID-3jxq-kxnz-6bfh |
|
| 2 |
| vulnerability |
VCID-4331-d5yy-uybc |
|
| 3 |
| vulnerability |
VCID-46yu-yqv4-1ugb |
|
| 4 |
| vulnerability |
VCID-4tfv-snmv-bbax |
|
| 5 |
| vulnerability |
VCID-52zf-mjec-f3d5 |
|
| 6 |
| vulnerability |
VCID-5mcc-gtrr-j3e4 |
|
| 7 |
| vulnerability |
VCID-6hdk-ywcn-4qe4 |
|
| 8 |
| vulnerability |
VCID-6smx-ju23-8qes |
|
| 9 |
| vulnerability |
VCID-7d8z-g99x-7qh2 |
|
| 10 |
| vulnerability |
VCID-95kg-bk3s-g7gx |
|
| 11 |
| vulnerability |
VCID-aq21-sp74-17gk |
|
| 12 |
| vulnerability |
VCID-axds-bd49-fbdj |
|
| 13 |
| vulnerability |
VCID-b423-t4kx-eqbq |
|
| 14 |
| vulnerability |
VCID-b8cv-v25q-1kh3 |
|
| 15 |
| vulnerability |
VCID-brft-snn6-guc8 |
|
| 16 |
| vulnerability |
VCID-bvsa-kz7r-zyea |
|
| 17 |
| vulnerability |
VCID-enwa-2cfn-5uab |
|
| 18 |
| vulnerability |
VCID-hyr1-b223-bkef |
|
| 19 |
| vulnerability |
VCID-kgjy-7kdy-c3cg |
|
| 20 |
| vulnerability |
VCID-m87b-eb5y-8ydf |
|
| 21 |
| vulnerability |
VCID-mk3k-n9wn-q3ct |
|
| 22 |
| vulnerability |
VCID-n2b8-e8fa-2ue1 |
|
| 23 |
| vulnerability |
VCID-nx86-xnct-afbs |
|
| 24 |
| vulnerability |
VCID-p6cz-c9ah-c7cp |
|
| 25 |
| vulnerability |
VCID-qtt6-8kf8-1fbt |
|
| 26 |
| vulnerability |
VCID-rarq-tdjt-hff3 |
|
| 27 |
| vulnerability |
VCID-rnub-zmb6-5yhw |
|
| 28 |
| vulnerability |
VCID-sdv2-h8d8-9ydj |
|
| 29 |
| vulnerability |
VCID-tfhg-gzz2-7qc5 |
|
| 30 |
| vulnerability |
VCID-uvca-5e2n-pqew |
|
| 31 |
| vulnerability |
VCID-vctt-ev3n-zkf8 |
|
| 32 |
| vulnerability |
VCID-xk7s-y611-mffc |
|
| 33 |
| vulnerability |
VCID-xn7b-vz2e-6qdh |
|
| 34 |
| vulnerability |
VCID-xpfd-zdry-euh5 |
|
| 35 |
| vulnerability |
VCID-zjct-yufk-jkdg |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.1 |
|
|
| aliases |
CVE-2018-16859, GHSA-v735-2pp6-h86r, PYSEC-2018-60
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zcmk-4k97-kkd9 |
|