Search for packages
| purl | pkg:deb/debian/ansible@1.5.5%2Bdfsg-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-c22m-1buy-3uc5 | The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file. |
CVE-2014-4658
GHSA-5g4v-2pc6-4hh4 PYSEC-2020-200 |
| VCID-jwsu-7znb-kueg | Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by leveraging existence of a file that uses the "deb http://user:pass@server:port/" format. |
CVE-2014-4660
GHSA-5xm4-jmpw-p6j3 PYSEC-2020-202 |
| VCID-vdyk-rcxz-z7an | The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. |
CVE-2014-4657
GHSA-qg47-5px9-32g7 PYSEC-2020-199 |
| VCID-w6be-213x-1yh3 | Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format. |
CVE-2014-4659
GHSA-6667-f46p-pg88 PYSEC-2020-201 |