Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/ansible@2.2.3.0
Typepypi
Namespace
Nameansible
Version2.2.3.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version12.0.0
Latest_non_vulnerable_version12.2.0
Affected_by_vulnerabilities
0
url VCID-257n-yc2z-hfe8
vulnerability_id VCID-257n-yc2z-hfe8
summary 
Ansible symlink attack vulnerability
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
references
0
reference_url https://access.redhat.com/errata/RHSA-2023:5701
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2023:5701
1
reference_url https://access.redhat.com/errata/RHSA-2023:5758
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2023:5758
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5115.json
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5115.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5115
reference_id
reference_type
scores
0
value 0.0066
scoring_system epss
scoring_elements 0.71438
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5115
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2233810
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=2233810
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
7
reference_url https://github.com/ansible/ansible/commit/1e930684bc0a76ec3d094cd326738ad26416541c
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/1e930684bc0a76ec3d094cd326738ad26416541c
8
reference_url https://github.com/ansible-community/ansible-build-data/blob/16d36538b96c65d9e0e28d89781361b69857ac0e/8/CHANGELOG-v8.rst#L221
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible-community/ansible-build-data/blob/16d36538b96c65d9e0e28d89781361b69857ac0e/8/CHANGELOG-v8.rst#L221
9
reference_url https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053693
reference_id 1053693
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053693
11
reference_url https://access.redhat.com/security/cve/CVE-2023-5115
reference_id CVE-2023-5115
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/cve/CVE-2023-5115
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5115
reference_id CVE-2023-5115
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5115
13
reference_url https://github.com/advisories/GHSA-jpvw-p8pr-9g2x
reference_id GHSA-jpvw-p8pr-9g2x
reference_type
scores
url https://github.com/advisories/GHSA-jpvw-p8pr-9g2x
fixed_packages
0
url pkg:pypi/ansible@8.5.0
purl pkg:pypi/ansible@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d8by-xxm3-xkhb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@8.5.0
aliases CVE-2023-5115, GHSA-jpvw-p8pr-9g2x
risk_score 2.9
exploitability 0.5
weighted_severity 5.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-257n-yc2z-hfe8
1
url VCID-3jxq-kxnz-6bfh
vulnerability_id VCID-3jxq-kxnz-6bfh
summary A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to confidentiality.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20228.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20228.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20228
reference_id
reference_type
scores
0
value 0.00243
scoring_system epss
scoring_elements 0.47749
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20228
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1925002
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1925002
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
21
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
22
reference_url https://github.com/advisories/GHSA-5rrg-rr89-x9mv
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-5rrg-rr89-x9mv
23
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
24
reference_url https://github.com/ansible/ansible/commit/49ebd509df9de1c1fc1bcee00e79a835dd00662c
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/49ebd509df9de1c1fc1bcee00e79a835dd00662c
25
reference_url https://github.com/ansible/ansible/commit/e41d1f0a3fd6c466192e7e24accd3d1c6501111b
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/e41d1f0a3fd6c466192e7e24accd3d1c6501111b
26
reference_url https://github.com/ansible/ansible/commit/f8ff395d817c3eddc050f809919c15dfb5796120
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/f8ff395d817c3eddc050f809919c15dfb5796120
27
reference_url https://github.com/ansible/ansible/pull/73487
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/73487
28
reference_url https://github.com/ansible/ansible/pull/73492
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/73492
29
reference_url https://github.com/ansible/ansible/pull/73493
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/73493
30
reference_url https://github.com/ansible/ansible/pull/73494
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/73494
31
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-1.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-1.yaml
32
reference_url https://www.debian.org/security/2021/dsa-4950
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4950
33
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-20228
reference_id CVE-2021-20228
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-20228
34
reference_url https://access.redhat.com/errata/RHSA-2021:0663
reference_id RHSA-2021:0663
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0663
35
reference_url https://access.redhat.com/errata/RHSA-2021:0664
reference_id RHSA-2021:0664
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0664
36
reference_url https://access.redhat.com/errata/RHSA-2021:1079
reference_id RHSA-2021:1079
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1079
37
reference_url https://access.redhat.com/errata/RHSA-2021:2180
reference_id RHSA-2021:2180
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2180
fixed_packages
0
url pkg:pypi/ansible@2.8.19rc1
purl pkg:pypi/ansible@2.8.19rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-95kg-bk3s-g7gx
6
vulnerability VCID-98zq-xddz-dyc8
7
vulnerability VCID-b8cv-v25q-1kh3
8
vulnerability VCID-d8by-xxm3-xkhb
9
vulnerability VCID-enwa-2cfn-5uab
10
vulnerability VCID-hyr1-b223-bkef
11
vulnerability VCID-j4px-r23h-9kb7
12
vulnerability VCID-kgjy-7kdy-c3cg
13
vulnerability VCID-m87b-eb5y-8ydf
14
vulnerability VCID-nx86-xnct-afbs
15
vulnerability VCID-qtt6-8kf8-1fbt
16
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.19rc1
1
url pkg:pypi/ansible@2.9.1
purl pkg:pypi/ansible@2.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-7d8z-g99x-7qh2
10
vulnerability VCID-95kg-bk3s-g7gx
11
vulnerability VCID-98zq-xddz-dyc8
12
vulnerability VCID-aq21-sp74-17gk
13
vulnerability VCID-axds-bd49-fbdj
14
vulnerability VCID-b423-t4kx-eqbq
15
vulnerability VCID-b8cv-v25q-1kh3
16
vulnerability VCID-brft-snn6-guc8
17
vulnerability VCID-bvsa-kz7r-zyea
18
vulnerability VCID-d8by-xxm3-xkhb
19
vulnerability VCID-enwa-2cfn-5uab
20
vulnerability VCID-hyr1-b223-bkef
21
vulnerability VCID-j4px-r23h-9kb7
22
vulnerability VCID-kgjy-7kdy-c3cg
23
vulnerability VCID-m87b-eb5y-8ydf
24
vulnerability VCID-n2b8-e8fa-2ue1
25
vulnerability VCID-nx86-xnct-afbs
26
vulnerability VCID-p6cz-c9ah-c7cp
27
vulnerability VCID-qtt6-8kf8-1fbt
28
vulnerability VCID-rarq-tdjt-hff3
29
vulnerability VCID-rnub-zmb6-5yhw
30
vulnerability VCID-tfhg-gzz2-7qc5
31
vulnerability VCID-uvca-5e2n-pqew
32
vulnerability VCID-xpfd-zdry-euh5
33
vulnerability VCID-ydka-2etb-hue9
34
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.1
2
url pkg:pypi/ansible@2.9.18rc1
purl pkg:pypi/ansible@2.9.18rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-98zq-xddz-dyc8
6
vulnerability VCID-b8cv-v25q-1kh3
7
vulnerability VCID-d8by-xxm3-xkhb
8
vulnerability VCID-enwa-2cfn-5uab
9
vulnerability VCID-hyr1-b223-bkef
10
vulnerability VCID-j4px-r23h-9kb7
11
vulnerability VCID-kgjy-7kdy-c3cg
12
vulnerability VCID-m87b-eb5y-8ydf
13
vulnerability VCID-qtt6-8kf8-1fbt
14
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18rc1
3
url pkg:pypi/ansible@2.9.19rc1
purl pkg:pypi/ansible@2.9.19rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-5r2p-dxtk-pkas
3
vulnerability VCID-98zq-xddz-dyc8
4
vulnerability VCID-b8cv-v25q-1kh3
5
vulnerability VCID-d8by-xxm3-xkhb
6
vulnerability VCID-enwa-2cfn-5uab
7
vulnerability VCID-hyr1-b223-bkef
8
vulnerability VCID-kgjy-7kdy-c3cg
9
vulnerability VCID-m87b-eb5y-8ydf
10
vulnerability VCID-qtt6-8kf8-1fbt
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.19rc1
4
url pkg:pypi/ansible@2.9.19
purl pkg:pypi/ansible@2.9.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-5r2p-dxtk-pkas
2
vulnerability VCID-98zq-xddz-dyc8
3
vulnerability VCID-b8cv-v25q-1kh3
4
vulnerability VCID-d8by-xxm3-xkhb
5
vulnerability VCID-enwa-2cfn-5uab
6
vulnerability VCID-hyr1-b223-bkef
7
vulnerability VCID-kgjy-7kdy-c3cg
8
vulnerability VCID-m87b-eb5y-8ydf
9
vulnerability VCID-qtt6-8kf8-1fbt
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.19
5
url pkg:pypi/ansible@2.10.6rc1
purl pkg:pypi/ansible@2.10.6rc1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.6rc1
aliases CVE-2021-20228, GHSA-5rrg-rr89-x9mv, PYSEC-2021-1
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3jxq-kxnz-6bfh
2
url VCID-4331-d5yy-uybc
vulnerability_id VCID-4331-d5yy-uybc
summary A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask 77 && mkdir -p <dir>"; this operation does not fail if the directory already exists and is owned by another user. An attacker could take advantage to gain control of the become user as the target directory can be retrieved by iterating '/proc/<pid>/cmdline'.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1733.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1733.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1733
reference_id
reference_type
scores
0
value 0.00027
scoring_system epss
scoring_elements 0.08127
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1733
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1733
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1733
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
21
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
22
reference_url https://github.com/advisories/GHSA-g4mq-6fp5-qwcf
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
3
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-g4mq-6fp5-qwcf
23
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
24
reference_url https://github.com/ansible/ansible/commit/80b9a0a25c5f75e84aefc8f2b293fb1933b154f2
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/80b9a0a25c5f75e84aefc8f2b293fb1933b154f2
25
reference_url https://github.com/ansible/ansible/commit/8251d9f4c2bc82632ab992277fcd30ccbf87aa47
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/8251d9f4c2bc82632ab992277fcd30ccbf87aa47
26
reference_url https://github.com/ansible/ansible/commit/ecf99d5e1ff732a7777010facd6c98bb0994605e
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/ecf99d5e1ff732a7777010facd6c98bb0994605e
27
reference_url https://github.com/ansible/ansible/issues/67791
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/67791
28
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-5.yaml
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-5.yaml
29
reference_url https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html
30
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW
31
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/
32
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S
33
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/
34
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB
35
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/
36
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1733
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1733
37
reference_url https://security.gentoo.org/glsa/202006-11
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202006-11
38
reference_url https://www.debian.org/security/2021/dsa-4950
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4950
39
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1801735
reference_id 1801735
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1801735
40
reference_url https://access.redhat.com/errata/RHSA-2020:1541
reference_id RHSA-2020:1541
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1541
41
reference_url https://access.redhat.com/errata/RHSA-2020:1542
reference_id RHSA-2020:1542
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1542
42
reference_url https://access.redhat.com/errata/RHSA-2020:1543
reference_id RHSA-2020:1543
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1543
43
reference_url https://access.redhat.com/errata/RHSA-2020:1544
reference_id RHSA-2020:1544
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1544
44
reference_url https://usn.ubuntu.com/USN-5315-1/
reference_id USN-USN-5315-1
reference_type
scores
url https://usn.ubuntu.com/USN-5315-1/
fixed_packages
0
url pkg:pypi/ansible@2.7.17
purl pkg:pypi/ansible@2.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6hdk-ywcn-4qe4
6
vulnerability VCID-6swz-79ue-bbef
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-gnq4-v5a7-m3ew
13
vulnerability VCID-hyr1-b223-bkef
14
vulnerability VCID-j4px-r23h-9kb7
15
vulnerability VCID-kgjy-7kdy-c3cg
16
vulnerability VCID-m87b-eb5y-8ydf
17
vulnerability VCID-nx86-xnct-afbs
18
vulnerability VCID-qtt6-8kf8-1fbt
19
vulnerability VCID-uvca-5e2n-pqew
20
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17
1
url pkg:pypi/ansible@2.8.8
purl pkg:pypi/ansible@2.8.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-b423-t4kx-eqbq
12
vulnerability VCID-b8cv-v25q-1kh3
13
vulnerability VCID-brft-snn6-guc8
14
vulnerability VCID-bvsa-kz7r-zyea
15
vulnerability VCID-d8by-xxm3-xkhb
16
vulnerability VCID-enwa-2cfn-5uab
17
vulnerability VCID-hyr1-b223-bkef
18
vulnerability VCID-j4px-r23h-9kb7
19
vulnerability VCID-kgjy-7kdy-c3cg
20
vulnerability VCID-m87b-eb5y-8ydf
21
vulnerability VCID-n2b8-e8fa-2ue1
22
vulnerability VCID-nx86-xnct-afbs
23
vulnerability VCID-qtt6-8kf8-1fbt
24
vulnerability VCID-rarq-tdjt-hff3
25
vulnerability VCID-rnub-zmb6-5yhw
26
vulnerability VCID-tfhg-gzz2-7qc5
27
vulnerability VCID-uvca-5e2n-pqew
28
vulnerability VCID-xpfd-zdry-euh5
29
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.8
2
url pkg:pypi/ansible@2.8.11
purl pkg:pypi/ansible@2.8.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-7d8z-g99x-7qh2
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-hyr1-b223-bkef
13
vulnerability VCID-j4px-r23h-9kb7
14
vulnerability VCID-kgjy-7kdy-c3cg
15
vulnerability VCID-m87b-eb5y-8ydf
16
vulnerability VCID-nx86-xnct-afbs
17
vulnerability VCID-qtt6-8kf8-1fbt
18
vulnerability VCID-tfhg-gzz2-7qc5
19
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11
3
url pkg:pypi/ansible@2.9.6
purl pkg:pypi/ansible@2.9.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-b8cv-v25q-1kh3
11
vulnerability VCID-bvsa-kz7r-zyea
12
vulnerability VCID-d8by-xxm3-xkhb
13
vulnerability VCID-enwa-2cfn-5uab
14
vulnerability VCID-hyr1-b223-bkef
15
vulnerability VCID-j4px-r23h-9kb7
16
vulnerability VCID-kgjy-7kdy-c3cg
17
vulnerability VCID-m87b-eb5y-8ydf
18
vulnerability VCID-nx86-xnct-afbs
19
vulnerability VCID-qtt6-8kf8-1fbt
20
vulnerability VCID-rarq-tdjt-hff3
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-ydka-2etb-hue9
25
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6
4
url pkg:pypi/ansible@2.9.7
purl pkg:pypi/ansible@2.9.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-7d8z-g99x-7qh2
7
vulnerability VCID-98zq-xddz-dyc8
8
vulnerability VCID-b8cv-v25q-1kh3
9
vulnerability VCID-d8by-xxm3-xkhb
10
vulnerability VCID-enwa-2cfn-5uab
11
vulnerability VCID-hyr1-b223-bkef
12
vulnerability VCID-j4px-r23h-9kb7
13
vulnerability VCID-kgjy-7kdy-c3cg
14
vulnerability VCID-m87b-eb5y-8ydf
15
vulnerability VCID-nx86-xnct-afbs
16
vulnerability VCID-qtt6-8kf8-1fbt
17
vulnerability VCID-tfhg-gzz2-7qc5
18
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7
aliases CVE-2020-1733, GHSA-g4mq-6fp5-qwcf, PYSEC-2020-5
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4331-d5yy-uybc
3
url VCID-46yu-yqv4-1ugb
vulnerability_id VCID-46yu-yqv4-1ugb
summary In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
2
reference_url https://access.redhat.com/errata/RHSA-2019:3201
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:3201
3
reference_url https://access.redhat.com/errata/RHSA-2019:3202
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:3202
4
reference_url https://access.redhat.com/errata/RHSA-2019:3203
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:3203
5
reference_url https://access.redhat.com/errata/RHSA-2019:3207
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:3207
6
reference_url https://access.redhat.com/errata/RHSA-2020:0756
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0756
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846
8
reference_url https://github.com/ansible/ansible/pull/63366
reference_id
reference_type
scores
url https://github.com/ansible/ansible/pull/63366
9
reference_url https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html
10
reference_url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
fixed_packages
0
url pkg:pypi/ansible@2.6.20
purl pkg:pypi/ansible@2.6.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-95kg-bk3s-g7gx
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-axds-bd49-fbdj
11
vulnerability VCID-b423-t4kx-eqbq
12
vulnerability VCID-b8cv-v25q-1kh3
13
vulnerability VCID-brft-snn6-guc8
14
vulnerability VCID-d8by-xxm3-xkhb
15
vulnerability VCID-enwa-2cfn-5uab
16
vulnerability VCID-gnq4-v5a7-m3ew
17
vulnerability VCID-hyr1-b223-bkef
18
vulnerability VCID-j4px-r23h-9kb7
19
vulnerability VCID-kgjy-7kdy-c3cg
20
vulnerability VCID-m87b-eb5y-8ydf
21
vulnerability VCID-n2b8-e8fa-2ue1
22
vulnerability VCID-nx86-xnct-afbs
23
vulnerability VCID-p6cz-c9ah-c7cp
24
vulnerability VCID-qtt6-8kf8-1fbt
25
vulnerability VCID-rarq-tdjt-hff3
26
vulnerability VCID-rnub-zmb6-5yhw
27
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.20
1
url pkg:pypi/ansible@2.7.14
purl pkg:pypi/ansible@2.7.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-aq21-sp74-17gk
12
vulnerability VCID-axds-bd49-fbdj
13
vulnerability VCID-b423-t4kx-eqbq
14
vulnerability VCID-b8cv-v25q-1kh3
15
vulnerability VCID-brft-snn6-guc8
16
vulnerability VCID-bvsa-kz7r-zyea
17
vulnerability VCID-d8by-xxm3-xkhb
18
vulnerability VCID-enwa-2cfn-5uab
19
vulnerability VCID-gnq4-v5a7-m3ew
20
vulnerability VCID-hyr1-b223-bkef
21
vulnerability VCID-j4px-r23h-9kb7
22
vulnerability VCID-kgjy-7kdy-c3cg
23
vulnerability VCID-m87b-eb5y-8ydf
24
vulnerability VCID-n2b8-e8fa-2ue1
25
vulnerability VCID-nx86-xnct-afbs
26
vulnerability VCID-p6cz-c9ah-c7cp
27
vulnerability VCID-qtt6-8kf8-1fbt
28
vulnerability VCID-rarq-tdjt-hff3
29
vulnerability VCID-rnub-zmb6-5yhw
30
vulnerability VCID-uvca-5e2n-pqew
31
vulnerability VCID-vctt-ev3n-zkf8
32
vulnerability VCID-xpfd-zdry-euh5
33
vulnerability VCID-zcmk-4k97-kkd9
34
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.14
2
url pkg:pypi/ansible@2.8.6
purl pkg:pypi/ansible@2.8.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-7d8z-g99x-7qh2
10
vulnerability VCID-95kg-bk3s-g7gx
11
vulnerability VCID-98zq-xddz-dyc8
12
vulnerability VCID-aq21-sp74-17gk
13
vulnerability VCID-axds-bd49-fbdj
14
vulnerability VCID-b423-t4kx-eqbq
15
vulnerability VCID-b8cv-v25q-1kh3
16
vulnerability VCID-brft-snn6-guc8
17
vulnerability VCID-bvsa-kz7r-zyea
18
vulnerability VCID-d8by-xxm3-xkhb
19
vulnerability VCID-enwa-2cfn-5uab
20
vulnerability VCID-hyr1-b223-bkef
21
vulnerability VCID-j4px-r23h-9kb7
22
vulnerability VCID-kgjy-7kdy-c3cg
23
vulnerability VCID-m87b-eb5y-8ydf
24
vulnerability VCID-n2b8-e8fa-2ue1
25
vulnerability VCID-nx86-xnct-afbs
26
vulnerability VCID-p6cz-c9ah-c7cp
27
vulnerability VCID-qtt6-8kf8-1fbt
28
vulnerability VCID-rarq-tdjt-hff3
29
vulnerability VCID-rnub-zmb6-5yhw
30
vulnerability VCID-tfhg-gzz2-7qc5
31
vulnerability VCID-uvca-5e2n-pqew
32
vulnerability VCID-vctt-ev3n-zkf8
33
vulnerability VCID-xpfd-zdry-euh5
34
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.6
aliases PYSEC-2019-74
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-46yu-yqv4-1ugb
4
url VCID-49gh-wgmc-mfew
vulnerability_id VCID-49gh-wgmc-mfew
summary information disclosure
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20180.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20180.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20180
reference_id
reference_type
scores
0
value 0.00038
scoring_system epss
scoring_elements 0.11586
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20180
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1915808
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1915808
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
5
reference_url https://github.com/ansible/ansible/blob/v2.8.19/changelogs/CHANGELOG-v2.8.rst
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/blob/v2.8.19/changelogs/CHANGELOG-v2.8.rst
6
reference_url https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst
7
reference_url https://github.com/ansible/ansible/pull/73242
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/73242
8
reference_url https://github.com/ansible/ansible/pull/73243
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/73243
9
reference_url https://github.com/ansible/ansible/tree/v2.7.18/lib/ansible/modules/source_control
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/tree/v2.7.18/lib/ansible/modules/source_control
10
reference_url https://github.com/ansible/ansible/tree/v2.8.0a1/lib/ansible/modules/source_control
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/tree/v2.8.0a1/lib/ansible/modules/source_control
11
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753
reference_id 985753
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753
12
reference_url https://security.archlinux.org/ASA-202102-9
reference_id ASA-202102-9
reference_type
scores
url https://security.archlinux.org/ASA-202102-9
13
reference_url https://security.archlinux.org/AVG-1437
reference_id AVG-1437
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1437
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-20180
reference_id CVE-2021-20180
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-20180
15
reference_url https://github.com/advisories/GHSA-fh5v-5f35-2rv2
reference_id GHSA-fh5v-5f35-2rv2
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-fh5v-5f35-2rv2
16
reference_url https://access.redhat.com/errata/RHSA-2021:0663
reference_id RHSA-2021:0663
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0663
17
reference_url https://access.redhat.com/errata/RHSA-2021:0664
reference_id RHSA-2021:0664
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0664
18
reference_url https://access.redhat.com/errata/RHSA-2021:1079
reference_id RHSA-2021:1079
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1079
19
reference_url https://access.redhat.com/errata/RHSA-2021:2180
reference_id RHSA-2021:2180
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2180
fixed_packages
0
url pkg:pypi/ansible@2.8.19
purl pkg:pypi/ansible@2.8.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-95kg-bk3s-g7gx
6
vulnerability VCID-98zq-xddz-dyc8
7
vulnerability VCID-b8cv-v25q-1kh3
8
vulnerability VCID-d8by-xxm3-xkhb
9
vulnerability VCID-enwa-2cfn-5uab
10
vulnerability VCID-hyr1-b223-bkef
11
vulnerability VCID-j4px-r23h-9kb7
12
vulnerability VCID-kgjy-7kdy-c3cg
13
vulnerability VCID-m87b-eb5y-8ydf
14
vulnerability VCID-nx86-xnct-afbs
15
vulnerability VCID-qtt6-8kf8-1fbt
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.19
1
url pkg:pypi/ansible@2.9.18
purl pkg:pypi/ansible@2.9.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-5r2p-dxtk-pkas
3
vulnerability VCID-98zq-xddz-dyc8
4
vulnerability VCID-b8cv-v25q-1kh3
5
vulnerability VCID-d8by-xxm3-xkhb
6
vulnerability VCID-enwa-2cfn-5uab
7
vulnerability VCID-hyr1-b223-bkef
8
vulnerability VCID-kgjy-7kdy-c3cg
9
vulnerability VCID-m87b-eb5y-8ydf
10
vulnerability VCID-qtt6-8kf8-1fbt
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18
aliases CVE-2021-20180, GHSA-fh5v-5f35-2rv2
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-49gh-wgmc-mfew
5
url VCID-5mcc-gtrr-j3e4
vulnerability_id VCID-5mcc-gtrr-j3e4
summary information disclosure
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20178.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20178.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20178
reference_id
reference_type
scores
0
value 0.00028
scoring_system epss
scoring_elements 0.0848
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20178
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1914774
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1914774
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/advisories/GHSA-wv5p-gmmv-wh9v
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-wv5p-gmmv-wh9v
5
reference_url https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes
6
reference_url https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes,
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes,
7
reference_url https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes%2C
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/blob/v2.9.18/changelogs/CHANGELOG-v2.9.rst#security-fixes%2C
8
reference_url https://github.com/ansible-collections/community.general/commit/1d0c5e2ba47724c31a18d7b08b9daf13df8829dc
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible-collections/community.general/commit/1d0c5e2ba47724c31a18d7b08b9daf13df8829dc
9
reference_url https://github.com/ansible-collections/community.general/pull/1635
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible-collections/community.general/pull/1635
10
reference_url https://github.com/ansible-collections/community.general/pull/1635,
reference_id
reference_type
scores
url https://github.com/ansible-collections/community.general/pull/1635,
11
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-106.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-106.yaml
12
reference_url https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FUQ2QKAQA5OW2TY3ACZZMFIAJ2EQTG37/
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55
18
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIU7QZUV73U6ZQ65VJWSFBTCALVXLH55/
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-20178
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-20178
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753
reference_id 985753
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753
21
reference_url https://security.archlinux.org/ASA-202102-9
reference_id ASA-202102-9
reference_type
scores
url https://security.archlinux.org/ASA-202102-9
22
reference_url https://security.archlinux.org/AVG-1437
reference_id AVG-1437
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1437
23
reference_url https://access.redhat.com/errata/RHSA-2021:0663
reference_id RHSA-2021:0663
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0663
24
reference_url https://access.redhat.com/errata/RHSA-2021:0664
reference_id RHSA-2021:0664
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0664
25
reference_url https://access.redhat.com/errata/RHSA-2021:1079
reference_id RHSA-2021:1079
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1079
26
reference_url https://access.redhat.com/errata/RHSA-2021:2180
reference_id RHSA-2021:2180
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2180
fixed_packages
0
url pkg:pypi/ansible@2.9.18
purl pkg:pypi/ansible@2.9.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-5r2p-dxtk-pkas
3
vulnerability VCID-98zq-xddz-dyc8
4
vulnerability VCID-b8cv-v25q-1kh3
5
vulnerability VCID-d8by-xxm3-xkhb
6
vulnerability VCID-enwa-2cfn-5uab
7
vulnerability VCID-hyr1-b223-bkef
8
vulnerability VCID-kgjy-7kdy-c3cg
9
vulnerability VCID-m87b-eb5y-8ydf
10
vulnerability VCID-qtt6-8kf8-1fbt
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18
aliases CVE-2021-20178, GHSA-wv5p-gmmv-wh9v, PYSEC-2021-106
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5mcc-gtrr-j3e4
6
url VCID-5r2p-dxtk-pkas
vulnerability_id VCID-5r2p-dxtk-pkas
summary 
Improper Neutralization of Special Elements Used in a Template Engine
A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce code injection when supplying templating data.
references
0
reference_url https://access.redhat.com/errata/RHSA-2023:7773
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-07-19T03:55:28Z/
url https://access.redhat.com/errata/RHSA-2023:7773
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5764.json
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5764.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5764
reference_id
reference_type
scores
0
value 0.00065
scoring_system epss
scoring_elements 0.20358
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5764
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2247629
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-07-19T03:55:28Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2247629
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5764
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5764
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
7
reference_url https://github.com/ansible/ansible/commit/270b39f6ff02511a2199505161218cbd1a5ae34f
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/270b39f6ff02511a2199505161218cbd1a5ae34f
8
reference_url https://github.com/ansible/ansible/commit/7239d2d371bc6e274cbb7314e01431adce6ae25a
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/7239d2d371bc6e274cbb7314e01431adce6ae25a
9
reference_url https://github.com/ansible/ansible/commit/fea130480d261ea5bf6fcd5cf19a348f1686ceb1
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/fea130480d261ea5bf6fcd5cf19a348f1686ceb1
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7Q6CHPVCHMZS5M7V22GOKFSXZAQ24EU
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7Q6CHPVCHMZS5M7V22GOKFSXZAQ24EU
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7Q6CHPVCHMZS5M7V22GOKFSXZAQ24EU/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7Q6CHPVCHMZS5M7V22GOKFSXZAQ24EU/
12
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057427
reference_id 1057427
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057427
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform:2.4::el8
reference_id cpe:/a:redhat:ansible_automation_platform:2.4::el8
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform:2.4::el8
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform:2.4::el9
reference_id cpe:/a:redhat:ansible_automation_platform:2.4::el9
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform:2.4::el9
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8
reference_id cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9
reference_id cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8
reference_id cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9
reference_id cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9
19
reference_url https://access.redhat.com/security/cve/CVE-2023-5764
reference_id CVE-2023-5764
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-07-19T03:55:28Z/
url https://access.redhat.com/security/cve/CVE-2023-5764
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5764
reference_id CVE-2023-5764
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5764
21
reference_url https://github.com/advisories/GHSA-7j69-qfc3-2fq9
reference_id GHSA-7j69-qfc3-2fq9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7j69-qfc3-2fq9
22
reference_url https://usn.ubuntu.com/6846-1/
reference_id USN-6846-1
reference_type
scores
url https://usn.ubuntu.com/6846-1/
fixed_packages
0
url pkg:pypi/ansible@3.0.0b1
purl pkg:pypi/ansible@3.0.0b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-d8by-xxm3-xkhb
2
vulnerability VCID-kgjy-7kdy-c3cg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@3.0.0b1
1
url pkg:pypi/ansible@3.0.0
purl pkg:pypi/ansible@3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-d8by-xxm3-xkhb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@3.0.0
aliases CVE-2023-5764, GHSA-7j69-qfc3-2fq9
risk_score 3.2
exploitability 0.5
weighted_severity 6.4
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5r2p-dxtk-pkas
7
url VCID-664v-ms96-jfd2
vulnerability_id VCID-664v-ms96-jfd2
summary Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.
references
0
reference_url https://access.redhat.com/errata/RHSA-2017:1244
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1244
1
reference_url https://access.redhat.com/errata/RHSA-2017:1334
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1334
2
reference_url https://access.redhat.com/errata/RHSA-2017:1476
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1476
3
reference_url https://access.redhat.com/errata/RHSA-2017:1499
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1499
4
reference_url https://access.redhat.com/errata/RHSA-2017:1599
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1599
5
reference_url https://access.redhat.com/errata/RHSA-2017:2524
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:2524
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7481.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7481.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7481
reference_id
reference_type
scores
0
value 0.04313
scoring_system epss
scoring_elements 0.89067
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7481
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7481
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7481
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://github.com/advisories/GHSA-w578-j992-554x
reference_id
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w578-j992-554x
11
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
12
reference_url https://github.com/ansible/ansible/commit/a1886911fcf4b691130cfc70dfc5daa5e07c46a3
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/a1886911fcf4b691130cfc70dfc5daa5e07c46a3
13
reference_url https://github.com/ansible/ansible/commit/ed56f51f185a1ffd7ea57130d260098686fcc7c2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/ed56f51f185a1ffd7ea57130d260098686fcc7c2
14
reference_url https://github.com/ansible/ansible/commit/f0e348f5eeb70c1fb3127d90891da43b5c0a9d29
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/f0e348f5eeb70c1fb3127d90891da43b5c0a9d29
15
reference_url https://github.com/ansible/ansible/commit/fd30f5328986f9e1da434474481f32bf918a600c
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/fd30f5328986f9e1da434474481f32bf918a600c
16
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-41.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-41.yaml
17
reference_url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
18
reference_url https://usn.ubuntu.com/4072-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4072-1
19
reference_url https://usn.ubuntu.com/4072-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4072-1/
20
reference_url https://web.archive.org/web/20170801122609/http://www.securityfocus.com/bid/98492
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20170801122609/http://www.securityfocus.com/bid/98492
21
reference_url http://www.securityfocus.com/bid/98492
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/98492
22
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1450018
reference_id 1450018
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1450018
23
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862666
reference_id 862666
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862666
24
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-7481
reference_id CVE-2017-7481
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-7481
fixed_packages
0
url pkg:pypi/ansible@2.3.1.0
purl pkg:pypi/ansible@2.3.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-46yu-yqv4-1ugb
4
vulnerability VCID-49gh-wgmc-mfew
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-7f2g-zz9p-sufc
11
vulnerability VCID-826d-vdw1-dbaj
12
vulnerability VCID-95kg-bk3s-g7gx
13
vulnerability VCID-a79h-gfcm-13cq
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-bmq3-uckn-tfhk
18
vulnerability VCID-brft-snn6-guc8
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-n2b8-e8fa-2ue1
27
vulnerability VCID-nx86-xnct-afbs
28
vulnerability VCID-p6cz-c9ah-c7cp
29
vulnerability VCID-qbws-64b9-83fc
30
vulnerability VCID-qtt6-8kf8-1fbt
31
vulnerability VCID-rarq-tdjt-hff3
32
vulnerability VCID-rnub-zmb6-5yhw
33
vulnerability VCID-uvca-5e2n-pqew
34
vulnerability VCID-xk7s-y611-mffc
35
vulnerability VCID-xn7b-vz2e-6qdh
36
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.3.1.0
1
url pkg:pypi/ansible@2.4.0.0
purl pkg:pypi/ansible@2.4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-46yu-yqv4-1ugb
4
vulnerability VCID-49gh-wgmc-mfew
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-7f2g-zz9p-sufc
11
vulnerability VCID-826d-vdw1-dbaj
12
vulnerability VCID-95kg-bk3s-g7gx
13
vulnerability VCID-a79h-gfcm-13cq
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-bmq3-uckn-tfhk
18
vulnerability VCID-brft-snn6-guc8
19
vulnerability VCID-ce7n-7xet-pyav
20
vulnerability VCID-d8by-xxm3-xkhb
21
vulnerability VCID-enwa-2cfn-5uab
22
vulnerability VCID-gnq4-v5a7-m3ew
23
vulnerability VCID-hyr1-b223-bkef
24
vulnerability VCID-j4px-r23h-9kb7
25
vulnerability VCID-kgjy-7kdy-c3cg
26
vulnerability VCID-kva6-sjfx-rbe3
27
vulnerability VCID-m87b-eb5y-8ydf
28
vulnerability VCID-n2b8-e8fa-2ue1
29
vulnerability VCID-nx86-xnct-afbs
30
vulnerability VCID-p6cz-c9ah-c7cp
31
vulnerability VCID-qbws-64b9-83fc
32
vulnerability VCID-qtt6-8kf8-1fbt
33
vulnerability VCID-rarq-tdjt-hff3
34
vulnerability VCID-rnub-zmb6-5yhw
35
vulnerability VCID-smbs-h4tr-3qbv
36
vulnerability VCID-uvca-5e2n-pqew
37
vulnerability VCID-xk7s-y611-mffc
38
vulnerability VCID-xn7b-vz2e-6qdh
39
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.0.0
aliases CVE-2017-7481, GHSA-w578-j992-554x, PYSEC-2018-41
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-664v-ms96-jfd2
8
url VCID-6hdk-ywcn-4qe4
vulnerability_id VCID-6hdk-ywcn-4qe4
summary A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl from the command line, not using an environment variable or an input configuration file. This will disclose passwords and tokens from process list and no_log directive from debug module would not have any effect making these secrets being disclosed on stdout and log files.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1753.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1753.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1753
reference_id
reference_type
scores
0
value 0.00051
scoring_system epss
scoring_elements 0.16115
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1753
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
21
reference_url https://github.com/advisories/GHSA-86hp-cj9j-33vv
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-86hp-cj9j-33vv
22
reference_url https://github.com/ansible/ansible/commit/04ba05e003b268b83df6c106ba5c0f08548b1380
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/04ba05e003b268b83df6c106ba5c0f08548b1380
23
reference_url https://github.com/ansible/ansible/commit/137caed836ef096945086cfe75dc11587b68db3a
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/137caed836ef096945086cfe75dc11587b68db3a
24
reference_url https://github.com/ansible/ansible/commit/273d8538dbe5a7b5c9954f1929d3bb00904c43f6
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/273d8538dbe5a7b5c9954f1929d3bb00904c43f6
25
reference_url https://github.com/ansible/ansible/pull/68195
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/68195
26
reference_url https://github.com/ansible-collections/kubernetes
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible-collections/kubernetes
27
reference_url https://github.com/ansible-collections/kubernetes/pull/51
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible-collections/kubernetes/pull/51
28
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-210.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-210.yaml
29
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW
30
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/
31
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S
32
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/
33
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB
34
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/
35
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1753
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1753
36
reference_url https://security.gentoo.org/glsa/202006-11
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202006-11
37
reference_url https://www.debian.org/security/2021/dsa-4950
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4950
38
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1811008
reference_id 1811008
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1811008
39
reference_url https://access.redhat.com/errata/RHSA-2020:1541
reference_id RHSA-2020:1541
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1541
40
reference_url https://access.redhat.com/errata/RHSA-2020:1542
reference_id RHSA-2020:1542
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1542
41
reference_url https://access.redhat.com/errata/RHSA-2020:2142
reference_id RHSA-2020:2142
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2142
fixed_packages
0
url pkg:pypi/ansible@2.7.17
purl pkg:pypi/ansible@2.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6hdk-ywcn-4qe4
6
vulnerability VCID-6swz-79ue-bbef
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-gnq4-v5a7-m3ew
13
vulnerability VCID-hyr1-b223-bkef
14
vulnerability VCID-j4px-r23h-9kb7
15
vulnerability VCID-kgjy-7kdy-c3cg
16
vulnerability VCID-m87b-eb5y-8ydf
17
vulnerability VCID-nx86-xnct-afbs
18
vulnerability VCID-qtt6-8kf8-1fbt
19
vulnerability VCID-uvca-5e2n-pqew
20
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17
1
url pkg:pypi/ansible@2.7.18
purl pkg:pypi/ansible@2.7.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-95kg-bk3s-g7gx
7
vulnerability VCID-98zq-xddz-dyc8
8
vulnerability VCID-b8cv-v25q-1kh3
9
vulnerability VCID-d8by-xxm3-xkhb
10
vulnerability VCID-enwa-2cfn-5uab
11
vulnerability VCID-gnq4-v5a7-m3ew
12
vulnerability VCID-hyr1-b223-bkef
13
vulnerability VCID-j4px-r23h-9kb7
14
vulnerability VCID-kgjy-7kdy-c3cg
15
vulnerability VCID-m87b-eb5y-8ydf
16
vulnerability VCID-nx86-xnct-afbs
17
vulnerability VCID-qtt6-8kf8-1fbt
18
vulnerability VCID-uvca-5e2n-pqew
19
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.18
2
url pkg:pypi/ansible@2.8.0a1
purl pkg:pypi/ansible@2.8.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-7d8z-g99x-7qh2
11
vulnerability VCID-95kg-bk3s-g7gx
12
vulnerability VCID-98zq-xddz-dyc8
13
vulnerability VCID-aq21-sp74-17gk
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-brft-snn6-guc8
18
vulnerability VCID-bvsa-kz7r-zyea
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-mk3k-n9wn-q3ct
27
vulnerability VCID-n2b8-e8fa-2ue1
28
vulnerability VCID-nx86-xnct-afbs
29
vulnerability VCID-qtt6-8kf8-1fbt
30
vulnerability VCID-rarq-tdjt-hff3
31
vulnerability VCID-rnub-zmb6-5yhw
32
vulnerability VCID-uvca-5e2n-pqew
33
vulnerability VCID-xn7b-vz2e-6qdh
34
vulnerability VCID-xpfd-zdry-euh5
35
vulnerability VCID-zcmk-4k97-kkd9
36
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1
3
url pkg:pypi/ansible@2.8.9
purl pkg:pypi/ansible@2.8.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-b8cv-v25q-1kh3
12
vulnerability VCID-bvsa-kz7r-zyea
13
vulnerability VCID-d8by-xxm3-xkhb
14
vulnerability VCID-enwa-2cfn-5uab
15
vulnerability VCID-hyr1-b223-bkef
16
vulnerability VCID-j4px-r23h-9kb7
17
vulnerability VCID-kgjy-7kdy-c3cg
18
vulnerability VCID-m87b-eb5y-8ydf
19
vulnerability VCID-nx86-xnct-afbs
20
vulnerability VCID-qtt6-8kf8-1fbt
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9
4
url pkg:pypi/ansible@2.8.11
purl pkg:pypi/ansible@2.8.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-7d8z-g99x-7qh2
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-hyr1-b223-bkef
13
vulnerability VCID-j4px-r23h-9kb7
14
vulnerability VCID-kgjy-7kdy-c3cg
15
vulnerability VCID-m87b-eb5y-8ydf
16
vulnerability VCID-nx86-xnct-afbs
17
vulnerability VCID-qtt6-8kf8-1fbt
18
vulnerability VCID-tfhg-gzz2-7qc5
19
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11
5
url pkg:pypi/ansible@2.8.12
purl pkg:pypi/ansible@2.8.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-7d8z-g99x-7qh2
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-hyr1-b223-bkef
13
vulnerability VCID-j4px-r23h-9kb7
14
vulnerability VCID-kgjy-7kdy-c3cg
15
vulnerability VCID-m87b-eb5y-8ydf
16
vulnerability VCID-nx86-xnct-afbs
17
vulnerability VCID-qtt6-8kf8-1fbt
18
vulnerability VCID-tfhg-gzz2-7qc5
19
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.12
6
url pkg:pypi/ansible@2.9.6
purl pkg:pypi/ansible@2.9.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-b8cv-v25q-1kh3
11
vulnerability VCID-bvsa-kz7r-zyea
12
vulnerability VCID-d8by-xxm3-xkhb
13
vulnerability VCID-enwa-2cfn-5uab
14
vulnerability VCID-hyr1-b223-bkef
15
vulnerability VCID-j4px-r23h-9kb7
16
vulnerability VCID-kgjy-7kdy-c3cg
17
vulnerability VCID-m87b-eb5y-8ydf
18
vulnerability VCID-nx86-xnct-afbs
19
vulnerability VCID-qtt6-8kf8-1fbt
20
vulnerability VCID-rarq-tdjt-hff3
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-ydka-2etb-hue9
25
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6
7
url pkg:pypi/ansible@2.9.7
purl pkg:pypi/ansible@2.9.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-7d8z-g99x-7qh2
7
vulnerability VCID-98zq-xddz-dyc8
8
vulnerability VCID-b8cv-v25q-1kh3
9
vulnerability VCID-d8by-xxm3-xkhb
10
vulnerability VCID-enwa-2cfn-5uab
11
vulnerability VCID-hyr1-b223-bkef
12
vulnerability VCID-j4px-r23h-9kb7
13
vulnerability VCID-kgjy-7kdy-c3cg
14
vulnerability VCID-m87b-eb5y-8ydf
15
vulnerability VCID-nx86-xnct-afbs
16
vulnerability VCID-qtt6-8kf8-1fbt
17
vulnerability VCID-tfhg-gzz2-7qc5
18
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7
aliases CVE-2020-1753, GHSA-86hp-cj9j-33vv, PYSEC-2020-210
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6hdk-ywcn-4qe4
9
url VCID-6smx-ju23-8qes
vulnerability_id VCID-6smx-ju23-8qes
summary In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
2
reference_url https://access.redhat.com/errata/RHSA-2019:3201
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3201
3
reference_url https://access.redhat.com/errata/RHSA-2019:3202
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3202
4
reference_url https://access.redhat.com/errata/RHSA-2019:3203
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3203
5
reference_url https://access.redhat.com/errata/RHSA-2019:3207
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3207
6
reference_url https://access.redhat.com/errata/RHSA-2020:0756
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0756
7
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14846.json
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14846.json
8
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14846
reference_id
reference_type
scores
0
value 0.00117
scoring_system epss
scoring_elements 0.30132
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14846
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14846
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
25
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
26
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
27
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
28
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
29
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
30
reference_url https://github.com/ansible/ansible/commit/90e74dd2600e5cc42dd9b4f4656f3d651c4ce5c4
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/90e74dd2600e5cc42dd9b4f4656f3d651c4ce5c4
31
reference_url https://github.com/ansible/ansible/commit/cb0f535a8b254a2daf69cd067e842fabb2993034
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/cb0f535a8b254a2daf69cd067e842fabb2993034
32
reference_url https://github.com/ansible/ansible/commit/d961f676c01023a6a21503df16ba551a550e515b
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/d961f676c01023a6a21503df16ba551a550e515b
33
reference_url https://github.com/ansible/ansible/pull/63366
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/63366
34
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-4.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-4.yaml
35
reference_url https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html
36
reference_url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
37
reference_url https://www.debian.org/security/2021/dsa-4950
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4950
38
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1755373
reference_id 1755373
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1755373
39
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942188
reference_id 942188
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942188
40
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-14846
reference_id CVE-2019-14846
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-14846
41
reference_url https://github.com/advisories/GHSA-pm48-cvv2-29q5
reference_id GHSA-pm48-cvv2-29q5
reference_type
scores
url https://github.com/advisories/GHSA-pm48-cvv2-29q5
42
reference_url https://usn.ubuntu.com/7330-1/
reference_id USN-7330-1
reference_type
scores
url https://usn.ubuntu.com/7330-1/
fixed_packages
0
url pkg:pypi/ansible@2.6.20
purl pkg:pypi/ansible@2.6.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-95kg-bk3s-g7gx
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-axds-bd49-fbdj
11
vulnerability VCID-b423-t4kx-eqbq
12
vulnerability VCID-b8cv-v25q-1kh3
13
vulnerability VCID-brft-snn6-guc8
14
vulnerability VCID-d8by-xxm3-xkhb
15
vulnerability VCID-enwa-2cfn-5uab
16
vulnerability VCID-gnq4-v5a7-m3ew
17
vulnerability VCID-hyr1-b223-bkef
18
vulnerability VCID-j4px-r23h-9kb7
19
vulnerability VCID-kgjy-7kdy-c3cg
20
vulnerability VCID-m87b-eb5y-8ydf
21
vulnerability VCID-n2b8-e8fa-2ue1
22
vulnerability VCID-nx86-xnct-afbs
23
vulnerability VCID-p6cz-c9ah-c7cp
24
vulnerability VCID-qtt6-8kf8-1fbt
25
vulnerability VCID-rarq-tdjt-hff3
26
vulnerability VCID-rnub-zmb6-5yhw
27
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.20
1
url pkg:pypi/ansible@2.7.14
purl pkg:pypi/ansible@2.7.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-aq21-sp74-17gk
12
vulnerability VCID-axds-bd49-fbdj
13
vulnerability VCID-b423-t4kx-eqbq
14
vulnerability VCID-b8cv-v25q-1kh3
15
vulnerability VCID-brft-snn6-guc8
16
vulnerability VCID-bvsa-kz7r-zyea
17
vulnerability VCID-d8by-xxm3-xkhb
18
vulnerability VCID-enwa-2cfn-5uab
19
vulnerability VCID-gnq4-v5a7-m3ew
20
vulnerability VCID-hyr1-b223-bkef
21
vulnerability VCID-j4px-r23h-9kb7
22
vulnerability VCID-kgjy-7kdy-c3cg
23
vulnerability VCID-m87b-eb5y-8ydf
24
vulnerability VCID-n2b8-e8fa-2ue1
25
vulnerability VCID-nx86-xnct-afbs
26
vulnerability VCID-p6cz-c9ah-c7cp
27
vulnerability VCID-qtt6-8kf8-1fbt
28
vulnerability VCID-rarq-tdjt-hff3
29
vulnerability VCID-rnub-zmb6-5yhw
30
vulnerability VCID-uvca-5e2n-pqew
31
vulnerability VCID-vctt-ev3n-zkf8
32
vulnerability VCID-xpfd-zdry-euh5
33
vulnerability VCID-zcmk-4k97-kkd9
34
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.14
2
url pkg:pypi/ansible@2.8.6
purl pkg:pypi/ansible@2.8.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-7d8z-g99x-7qh2
10
vulnerability VCID-95kg-bk3s-g7gx
11
vulnerability VCID-98zq-xddz-dyc8
12
vulnerability VCID-aq21-sp74-17gk
13
vulnerability VCID-axds-bd49-fbdj
14
vulnerability VCID-b423-t4kx-eqbq
15
vulnerability VCID-b8cv-v25q-1kh3
16
vulnerability VCID-brft-snn6-guc8
17
vulnerability VCID-bvsa-kz7r-zyea
18
vulnerability VCID-d8by-xxm3-xkhb
19
vulnerability VCID-enwa-2cfn-5uab
20
vulnerability VCID-hyr1-b223-bkef
21
vulnerability VCID-j4px-r23h-9kb7
22
vulnerability VCID-kgjy-7kdy-c3cg
23
vulnerability VCID-m87b-eb5y-8ydf
24
vulnerability VCID-n2b8-e8fa-2ue1
25
vulnerability VCID-nx86-xnct-afbs
26
vulnerability VCID-p6cz-c9ah-c7cp
27
vulnerability VCID-qtt6-8kf8-1fbt
28
vulnerability VCID-rarq-tdjt-hff3
29
vulnerability VCID-rnub-zmb6-5yhw
30
vulnerability VCID-tfhg-gzz2-7qc5
31
vulnerability VCID-uvca-5e2n-pqew
32
vulnerability VCID-vctt-ev3n-zkf8
33
vulnerability VCID-xpfd-zdry-euh5
34
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.6
3
url pkg:pypi/ansible@2.9.0b1
purl pkg:pypi/ansible@2.9.0b1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-b8cv-v25q-1kh3
12
vulnerability VCID-bvsa-kz7r-zyea
13
vulnerability VCID-d8by-xxm3-xkhb
14
vulnerability VCID-enwa-2cfn-5uab
15
vulnerability VCID-gnq4-v5a7-m3ew
16
vulnerability VCID-hyr1-b223-bkef
17
vulnerability VCID-j4px-r23h-9kb7
18
vulnerability VCID-kgjy-7kdy-c3cg
19
vulnerability VCID-m87b-eb5y-8ydf
20
vulnerability VCID-nx86-xnct-afbs
21
vulnerability VCID-qtt6-8kf8-1fbt
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.0b1
aliases CVE-2019-14846, GHSA-pm48-cvv2-29q5, PYSEC-2019-4
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6smx-ju23-8qes
10
url VCID-6swz-79ue-bbef
vulnerability_id VCID-6swz-79ue-bbef
summary A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitrary commands by overwriting the ansible facts.
references
0
reference_url https://access.redhat.com/errata/RHBA-2020:0547
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHBA-2020:0547
1
reference_url https://access.redhat.com/errata/RHBA-2020:1539
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHBA-2020:1539
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1734.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1734.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1734
reference_id
reference_type
scores
0
value 0.00083
scoring_system epss
scoring_elements 0.24234
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1734
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1801804
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1801804
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1734
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1734
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://github.com/advisories/GHSA-h39q-95q5-9jfp
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-h39q-95q5-9jfp
8
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
9
reference_url https://github.com/ansible/ansible/commit/4f978af4ca16ad9828ffe42203b9615425195f8b
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/4f978af4ca16ad9828ffe42203b9615425195f8b
10
reference_url https://github.com/ansible/ansible/commit/963bdd9983b91a48fb6949fb2ef41071e72d0be0
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/963bdd9983b91a48fb6949fb2ef41071e72d0be0
11
reference_url https://github.com/ansible/ansible/commit/bff0724e9eab2770f874e018298f9ab74cc2a78f
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/bff0724e9eab2770f874e018298f9ab74cc2a78f
12
reference_url https://github.com/ansible/ansible/commit/e5649ca3e807f17e7c034ee22791f107162973b0
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/e5649ca3e807f17e7c034ee22791f107162973b0
13
reference_url https://github.com/ansible/ansible/issues/67792
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/67792
14
reference_url https://github.com/ansible/ansible/issues/70159
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/70159
15
reference_url https://github.com/ansible/ansible/pull/70596
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/70596
16
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-6.yaml
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-6.yaml
17
reference_url https://access.redhat.com/security/cve/CVE-2020-1734
reference_id CVE-2020-1734
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/cve/CVE-2020-1734
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1734
reference_id CVE-2020-1734
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1734
fixed_packages
0
url pkg:pypi/ansible@2.7.17
purl pkg:pypi/ansible@2.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6hdk-ywcn-4qe4
6
vulnerability VCID-6swz-79ue-bbef
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-gnq4-v5a7-m3ew
13
vulnerability VCID-hyr1-b223-bkef
14
vulnerability VCID-j4px-r23h-9kb7
15
vulnerability VCID-kgjy-7kdy-c3cg
16
vulnerability VCID-m87b-eb5y-8ydf
17
vulnerability VCID-nx86-xnct-afbs
18
vulnerability VCID-qtt6-8kf8-1fbt
19
vulnerability VCID-uvca-5e2n-pqew
20
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17
1
url pkg:pypi/ansible@2.8.13
purl pkg:pypi/ansible@2.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-7d8z-g99x-7qh2
6
vulnerability VCID-95kg-bk3s-g7gx
7
vulnerability VCID-98zq-xddz-dyc8
8
vulnerability VCID-b8cv-v25q-1kh3
9
vulnerability VCID-d8by-xxm3-xkhb
10
vulnerability VCID-enwa-2cfn-5uab
11
vulnerability VCID-hyr1-b223-bkef
12
vulnerability VCID-j4px-r23h-9kb7
13
vulnerability VCID-kgjy-7kdy-c3cg
14
vulnerability VCID-m87b-eb5y-8ydf
15
vulnerability VCID-nx86-xnct-afbs
16
vulnerability VCID-qtt6-8kf8-1fbt
17
vulnerability VCID-tfhg-gzz2-7qc5
18
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.13
2
url pkg:pypi/ansible@2.9.11
purl pkg:pypi/ansible@2.9.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-7d8z-g99x-7qh2
6
vulnerability VCID-98zq-xddz-dyc8
7
vulnerability VCID-b8cv-v25q-1kh3
8
vulnerability VCID-d8by-xxm3-xkhb
9
vulnerability VCID-enwa-2cfn-5uab
10
vulnerability VCID-hyr1-b223-bkef
11
vulnerability VCID-j4px-r23h-9kb7
12
vulnerability VCID-kgjy-7kdy-c3cg
13
vulnerability VCID-m87b-eb5y-8ydf
14
vulnerability VCID-nx86-xnct-afbs
15
vulnerability VCID-qtt6-8kf8-1fbt
16
vulnerability VCID-tfhg-gzz2-7qc5
17
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.11
3
url pkg:pypi/ansible@2.10.0rc1
purl pkg:pypi/ansible@2.10.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-5r2p-dxtk-pkas
2
vulnerability VCID-98zq-xddz-dyc8
3
vulnerability VCID-b8cv-v25q-1kh3
4
vulnerability VCID-d8by-xxm3-xkhb
5
vulnerability VCID-hyr1-b223-bkef
6
vulnerability VCID-kgjy-7kdy-c3cg
7
vulnerability VCID-m87b-eb5y-8ydf
8
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.0rc1
aliases CVE-2020-1734, GHSA-h39q-95q5-9jfp, PYSEC-2020-6
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6swz-79ue-bbef
11
url VCID-7f2g-zz9p-sufc
vulnerability_id VCID-7f2g-zz9p-sufc
summary ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html
2
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html
3
reference_url https://access.redhat.com/errata/RHSA-2018:3835
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3835
4
reference_url https://access.redhat.com/errata/RHSA-2018:3836
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3836
5
reference_url https://access.redhat.com/errata/RHSA-2018:3837
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3837
6
reference_url https://access.redhat.com/errata/RHSA-2018:3838
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3838
7
reference_url https://access.redhat.com/errata/RHSA-2019:0564
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:0564
8
reference_url https://access.redhat.com/errata/RHSA-2019:0590
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:0590
9
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16876.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16876.json
10
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16876
reference_id
reference_type
scores
0
value 0.01236
scoring_system epss
scoring_elements 0.79535
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16876
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16876
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16876
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10855
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3828
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3828
17
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
18
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
19
reference_url https://github.com/ansible/ansible/commit/0954942dfdc563f80fd3e388f550aa165ec931da
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/0954942dfdc563f80fd3e388f550aa165ec931da
20
reference_url https://github.com/ansible/ansible/commit/424c68f15ad9f532d73e5afed33ff477f54281a7
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/424c68f15ad9f532d73e5afed33ff477f54281a7
21
reference_url https://github.com/ansible/ansible/commit/e0a81d133ffc8f7067182c53cf6a28c724dd1099
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/e0a81d133ffc8f7067182c53cf6a28c724dd1099
22
reference_url https://github.com/ansible/ansible/issues/51318
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/51318
23
reference_url https://github.com/ansible/ansible/pull/49569
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/49569
24
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-141.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-141.yaml
25
reference_url https://usn.ubuntu.com/4072-1
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4072-1
26
reference_url https://usn.ubuntu.com/4072-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4072-1/
27
reference_url https://web.archive.org/web/20200227100904/http://www.securityfocus.com/bid/106225
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200227100904/http://www.securityfocus.com/bid/106225
28
reference_url https://www.debian.org/security/2019/dsa-4396
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2019/dsa-4396
29
reference_url http://www.securityfocus.com/bid/106225
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/106225
30
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1657330
reference_id 1657330
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1657330
31
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916102
reference_id 916102
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916102
32
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-16876
reference_id CVE-2018-16876
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-16876
33
reference_url https://github.com/advisories/GHSA-j569-fghw-f9rx
reference_id GHSA-j569-fghw-f9rx
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j569-fghw-f9rx
fixed_packages
0
url pkg:pypi/ansible@2.5.14
purl pkg:pypi/ansible@2.5.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-3v1a-j6eq-57dk
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-5mcc-gtrr-j3e4
7
vulnerability VCID-5r2p-dxtk-pkas
8
vulnerability VCID-6hdk-ywcn-4qe4
9
vulnerability VCID-6smx-ju23-8qes
10
vulnerability VCID-6swz-79ue-bbef
11
vulnerability VCID-95kg-bk3s-g7gx
12
vulnerability VCID-98zq-xddz-dyc8
13
vulnerability VCID-axds-bd49-fbdj
14
vulnerability VCID-b423-t4kx-eqbq
15
vulnerability VCID-b8cv-v25q-1kh3
16
vulnerability VCID-bmq3-uckn-tfhk
17
vulnerability VCID-brft-snn6-guc8
18
vulnerability VCID-d8by-xxm3-xkhb
19
vulnerability VCID-enwa-2cfn-5uab
20
vulnerability VCID-gnq4-v5a7-m3ew
21
vulnerability VCID-hyr1-b223-bkef
22
vulnerability VCID-j4px-r23h-9kb7
23
vulnerability VCID-kgjy-7kdy-c3cg
24
vulnerability VCID-m87b-eb5y-8ydf
25
vulnerability VCID-n2b8-e8fa-2ue1
26
vulnerability VCID-nx86-xnct-afbs
27
vulnerability VCID-p6cz-c9ah-c7cp
28
vulnerability VCID-qtt6-8kf8-1fbt
29
vulnerability VCID-rarq-tdjt-hff3
30
vulnerability VCID-rnub-zmb6-5yhw
31
vulnerability VCID-uvca-5e2n-pqew
32
vulnerability VCID-xk7s-y611-mffc
33
vulnerability VCID-xn7b-vz2e-6qdh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.14
1
url pkg:pypi/ansible@2.6.11
purl pkg:pypi/ansible@2.6.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-3v1a-j6eq-57dk
4
vulnerability VCID-4331-d5yy-uybc
5
vulnerability VCID-46yu-yqv4-1ugb
6
vulnerability VCID-49gh-wgmc-mfew
7
vulnerability VCID-52zf-mjec-f3d5
8
vulnerability VCID-5mcc-gtrr-j3e4
9
vulnerability VCID-5r2p-dxtk-pkas
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-95kg-bk3s-g7gx
14
vulnerability VCID-98zq-xddz-dyc8
15
vulnerability VCID-axds-bd49-fbdj
16
vulnerability VCID-b423-t4kx-eqbq
17
vulnerability VCID-b8cv-v25q-1kh3
18
vulnerability VCID-bmq3-uckn-tfhk
19
vulnerability VCID-brft-snn6-guc8
20
vulnerability VCID-d8by-xxm3-xkhb
21
vulnerability VCID-enwa-2cfn-5uab
22
vulnerability VCID-gnq4-v5a7-m3ew
23
vulnerability VCID-hyr1-b223-bkef
24
vulnerability VCID-j4px-r23h-9kb7
25
vulnerability VCID-kgjy-7kdy-c3cg
26
vulnerability VCID-m87b-eb5y-8ydf
27
vulnerability VCID-n2b8-e8fa-2ue1
28
vulnerability VCID-nx86-xnct-afbs
29
vulnerability VCID-p6cz-c9ah-c7cp
30
vulnerability VCID-qtt6-8kf8-1fbt
31
vulnerability VCID-rarq-tdjt-hff3
32
vulnerability VCID-rnub-zmb6-5yhw
33
vulnerability VCID-uvca-5e2n-pqew
34
vulnerability VCID-xk7s-y611-mffc
35
vulnerability VCID-xn7b-vz2e-6qdh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.11
2
url pkg:pypi/ansible@2.7.5
purl pkg:pypi/ansible@2.7.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-3v1a-j6eq-57dk
4
vulnerability VCID-4331-d5yy-uybc
5
vulnerability VCID-46yu-yqv4-1ugb
6
vulnerability VCID-49gh-wgmc-mfew
7
vulnerability VCID-4tfv-snmv-bbax
8
vulnerability VCID-52zf-mjec-f3d5
9
vulnerability VCID-5mcc-gtrr-j3e4
10
vulnerability VCID-5r2p-dxtk-pkas
11
vulnerability VCID-6hdk-ywcn-4qe4
12
vulnerability VCID-6smx-ju23-8qes
13
vulnerability VCID-6swz-79ue-bbef
14
vulnerability VCID-95kg-bk3s-g7gx
15
vulnerability VCID-98zq-xddz-dyc8
16
vulnerability VCID-aq21-sp74-17gk
17
vulnerability VCID-axds-bd49-fbdj
18
vulnerability VCID-b423-t4kx-eqbq
19
vulnerability VCID-b8cv-v25q-1kh3
20
vulnerability VCID-bmq3-uckn-tfhk
21
vulnerability VCID-brft-snn6-guc8
22
vulnerability VCID-bvsa-kz7r-zyea
23
vulnerability VCID-d8by-xxm3-xkhb
24
vulnerability VCID-enwa-2cfn-5uab
25
vulnerability VCID-gnq4-v5a7-m3ew
26
vulnerability VCID-hyr1-b223-bkef
27
vulnerability VCID-j4px-r23h-9kb7
28
vulnerability VCID-kgjy-7kdy-c3cg
29
vulnerability VCID-m87b-eb5y-8ydf
30
vulnerability VCID-n2b8-e8fa-2ue1
31
vulnerability VCID-nx86-xnct-afbs
32
vulnerability VCID-p6cz-c9ah-c7cp
33
vulnerability VCID-qtt6-8kf8-1fbt
34
vulnerability VCID-rarq-tdjt-hff3
35
vulnerability VCID-rnub-zmb6-5yhw
36
vulnerability VCID-uvca-5e2n-pqew
37
vulnerability VCID-vctt-ev3n-zkf8
38
vulnerability VCID-xk7s-y611-mffc
39
vulnerability VCID-xn7b-vz2e-6qdh
40
vulnerability VCID-xpfd-zdry-euh5
41
vulnerability VCID-zcmk-4k97-kkd9
42
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.5
aliases CVE-2018-16876, GHSA-j569-fghw-f9rx, PYSEC-2019-141
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7f2g-zz9p-sufc
12
url VCID-826d-vdw1-dbaj
vulnerability_id VCID-826d-vdw1-dbaj
summary Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just to the process list.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html
2
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html
3
reference_url https://access.redhat.com/errata/RHSA-2018:3460
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3460
4
reference_url https://access.redhat.com/errata/RHSA-2018:3461
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3461
5
reference_url https://access.redhat.com/errata/RHSA-2018:3462
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3462
6
reference_url https://access.redhat.com/errata/RHSA-2018:3463
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3463
7
reference_url https://access.redhat.com/errata/RHSA-2018:3505
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3505
8
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16837.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16837.json
9
reference_url https://access.redhat.com/security/cve/cve-2018-16837
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/cve/cve-2018-16837
10
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16837
reference_id
reference_type
scores
0
value 0.00024
scoring_system epss
scoring_elements 0.07112
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16837
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16837
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16837
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10855
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3828
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3828
17
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
18
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
19
reference_url https://github.com/ansible/ansible/blob/c963ef1dfbf73efea5106624eb48b346f01eaefd/changelogs/CHANGELOG-v2.7.rst?plain=1#L138
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/blob/c963ef1dfbf73efea5106624eb48b346f01eaefd/changelogs/CHANGELOG-v2.7.rst?plain=1#L138
20
reference_url https://github.com/ansible/ansible/blob/stable-2.5/changelogs/CHANGELOG-v2.5.rst#v2511
reference_id
reference_type
scores
url https://github.com/ansible/ansible/blob/stable-2.5/changelogs/CHANGELOG-v2.5.rst#v2511
21
reference_url https://github.com/ansible/ansible/blob/stable-2.6/changelogs/CHANGELOG-v2.6.rst#v267
reference_id
reference_type
scores
url https://github.com/ansible/ansible/blob/stable-2.6/changelogs/CHANGELOG-v2.6.rst#v267
22
reference_url https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2.7.rst#v2-7-1
reference_id
reference_type
scores
url https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2.7.rst#v2-7-1
23
reference_url https://github.com/ansible/ansible/commit/77928e6c3a2ad878b20312ce5d74d9d7741e0df0
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/77928e6c3a2ad878b20312ce5d74d9d7741e0df0
24
reference_url https://github.com/ansible/ansible/commit/a0aa53d1a1d6075a7ae98ace138712ee6cb45ae4
reference_id
reference_type
scores
url https://github.com/ansible/ansible/commit/a0aa53d1a1d6075a7ae98ace138712ee6cb45ae4
25
reference_url https://github.com/ansible/ansible/commit/b618339c321c387230d3ea523e80ad47af3de5cf
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/b618339c321c387230d3ea523e80ad47af3de5cf
26
reference_url https://github.com/ansible/ansible/commit/f50cc0b8cb399bb7b7c1ad23b94c9404f0cc6d23
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/f50cc0b8cb399bb7b7c1ad23b94c9404f0cc6d23
27
reference_url https://github.com/ansible/ansible/pull/47436
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/47436
28
reference_url https://github.com/ansible/ansible/pull/47445
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/47445
29
reference_url https://github.com/ansible/ansible/pull/47486
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/47486
30
reference_url https://github.com/ansible/ansible/pull/47487
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/47487
31
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-44.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-44.yaml
32
reference_url https://lists.debian.org/debian-lts-announce/2018/11/msg00012.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2018/11/msg00012.html
33
reference_url https://usn.ubuntu.com/4072-1
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4072-1
34
reference_url https://usn.ubuntu.com/4072-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4072-1/
35
reference_url https://web.archive.org/web/20200227105539/http://www.securityfocus.com/bid/105700
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200227105539/http://www.securityfocus.com/bid/105700
36
reference_url https://www.debian.org/security/2019/dsa-4396
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2019/dsa-4396
37
reference_url http://www.securityfocus.com/bid/105700
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/105700
38
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1640642
reference_id 1640642
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1640642
39
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=912297
reference_id 912297
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=912297
40
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-16837
reference_id CVE-2018-16837
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-16837
fixed_packages
0
url pkg:pypi/ansible@2.5.11
purl pkg:pypi/ansible@2.5.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-3v1a-j6eq-57dk
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-5mcc-gtrr-j3e4
7
vulnerability VCID-5r2p-dxtk-pkas
8
vulnerability VCID-6hdk-ywcn-4qe4
9
vulnerability VCID-6smx-ju23-8qes
10
vulnerability VCID-6swz-79ue-bbef
11
vulnerability VCID-7f2g-zz9p-sufc
12
vulnerability VCID-95kg-bk3s-g7gx
13
vulnerability VCID-98zq-xddz-dyc8
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-bmq3-uckn-tfhk
18
vulnerability VCID-brft-snn6-guc8
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-n2b8-e8fa-2ue1
27
vulnerability VCID-nx86-xnct-afbs
28
vulnerability VCID-p6cz-c9ah-c7cp
29
vulnerability VCID-qtt6-8kf8-1fbt
30
vulnerability VCID-rarq-tdjt-hff3
31
vulnerability VCID-rnub-zmb6-5yhw
32
vulnerability VCID-uvca-5e2n-pqew
33
vulnerability VCID-xk7s-y611-mffc
34
vulnerability VCID-xn7b-vz2e-6qdh
35
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.11
1
url pkg:pypi/ansible@2.6.7
purl pkg:pypi/ansible@2.6.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-3v1a-j6eq-57dk
4
vulnerability VCID-4331-d5yy-uybc
5
vulnerability VCID-46yu-yqv4-1ugb
6
vulnerability VCID-49gh-wgmc-mfew
7
vulnerability VCID-52zf-mjec-f3d5
8
vulnerability VCID-5mcc-gtrr-j3e4
9
vulnerability VCID-5r2p-dxtk-pkas
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-7f2g-zz9p-sufc
14
vulnerability VCID-95kg-bk3s-g7gx
15
vulnerability VCID-98zq-xddz-dyc8
16
vulnerability VCID-axds-bd49-fbdj
17
vulnerability VCID-b423-t4kx-eqbq
18
vulnerability VCID-b8cv-v25q-1kh3
19
vulnerability VCID-bmq3-uckn-tfhk
20
vulnerability VCID-brft-snn6-guc8
21
vulnerability VCID-d8by-xxm3-xkhb
22
vulnerability VCID-enwa-2cfn-5uab
23
vulnerability VCID-gnq4-v5a7-m3ew
24
vulnerability VCID-hyr1-b223-bkef
25
vulnerability VCID-j4px-r23h-9kb7
26
vulnerability VCID-kgjy-7kdy-c3cg
27
vulnerability VCID-m87b-eb5y-8ydf
28
vulnerability VCID-n2b8-e8fa-2ue1
29
vulnerability VCID-nx86-xnct-afbs
30
vulnerability VCID-p6cz-c9ah-c7cp
31
vulnerability VCID-qtt6-8kf8-1fbt
32
vulnerability VCID-rarq-tdjt-hff3
33
vulnerability VCID-rnub-zmb6-5yhw
34
vulnerability VCID-uvca-5e2n-pqew
35
vulnerability VCID-xk7s-y611-mffc
36
vulnerability VCID-xn7b-vz2e-6qdh
37
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.7
2
url pkg:pypi/ansible@2.7.1
purl pkg:pypi/ansible@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-3v1a-j6eq-57dk
4
vulnerability VCID-4331-d5yy-uybc
5
vulnerability VCID-46yu-yqv4-1ugb
6
vulnerability VCID-49gh-wgmc-mfew
7
vulnerability VCID-4tfv-snmv-bbax
8
vulnerability VCID-52zf-mjec-f3d5
9
vulnerability VCID-5mcc-gtrr-j3e4
10
vulnerability VCID-5r2p-dxtk-pkas
11
vulnerability VCID-6hdk-ywcn-4qe4
12
vulnerability VCID-6smx-ju23-8qes
13
vulnerability VCID-6swz-79ue-bbef
14
vulnerability VCID-7f2g-zz9p-sufc
15
vulnerability VCID-95kg-bk3s-g7gx
16
vulnerability VCID-98zq-xddz-dyc8
17
vulnerability VCID-aq21-sp74-17gk
18
vulnerability VCID-axds-bd49-fbdj
19
vulnerability VCID-b423-t4kx-eqbq
20
vulnerability VCID-b8cv-v25q-1kh3
21
vulnerability VCID-bmq3-uckn-tfhk
22
vulnerability VCID-brft-snn6-guc8
23
vulnerability VCID-bvsa-kz7r-zyea
24
vulnerability VCID-d8by-xxm3-xkhb
25
vulnerability VCID-enwa-2cfn-5uab
26
vulnerability VCID-gnq4-v5a7-m3ew
27
vulnerability VCID-hyr1-b223-bkef
28
vulnerability VCID-j4px-r23h-9kb7
29
vulnerability VCID-kgjy-7kdy-c3cg
30
vulnerability VCID-m87b-eb5y-8ydf
31
vulnerability VCID-n2b8-e8fa-2ue1
32
vulnerability VCID-nx86-xnct-afbs
33
vulnerability VCID-p6cz-c9ah-c7cp
34
vulnerability VCID-qtt6-8kf8-1fbt
35
vulnerability VCID-rarq-tdjt-hff3
36
vulnerability VCID-rnub-zmb6-5yhw
37
vulnerability VCID-uvca-5e2n-pqew
38
vulnerability VCID-vctt-ev3n-zkf8
39
vulnerability VCID-xk7s-y611-mffc
40
vulnerability VCID-xn7b-vz2e-6qdh
41
vulnerability VCID-xpfd-zdry-euh5
42
vulnerability VCID-zcmk-4k97-kkd9
43
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.1
aliases CVE-2018-16837, GHSA-hwrm-63v2-42g4, PYSEC-2018-44
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-826d-vdw1-dbaj
13
url VCID-95kg-bk3s-g7gx
vulnerability_id VCID-95kg-bk3s-g7gx
summary A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords are exposed at once for the file. This flaw affects Ansible Engine versions before 2.9.6.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10729.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10729.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-10729
reference_id
reference_type
scores
0
value 0.00064
scoring_system epss
scoring_elements 0.20041
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-10729
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1831089
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1831089
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
21
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
22
reference_url https://github.com/advisories/GHSA-r6h7-5pq2-j77h
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-r6h7-5pq2-j77h
23
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
24
reference_url https://github.com/ansible/ansible/blob/v2.9.6/changelogs/CHANGELOG-v2.9.rst
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/blob/v2.9.6/changelogs/CHANGELOG-v2.9.rst
25
reference_url https://github.com/ansible/ansible/commit/c520d70bf4748c8ee6718a7d0d0254051ba1c2e9
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/c520d70bf4748c8ee6718a7d0d0254051ba1c2e9
26
reference_url https://github.com/ansible/ansible/issues/34144
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/34144
27
reference_url https://github.com/ansible/ansible/pull/67429
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/67429
28
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-105.yaml
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-105.yaml
29
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-10729
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-10729
30
reference_url https://www.debian.org/security/2021/dsa-4950
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4950
31
reference_url https://usn.ubuntu.com/7330-1/
reference_id USN-7330-1
reference_type
scores
url https://usn.ubuntu.com/7330-1/
fixed_packages
0
url pkg:pypi/ansible@2.9.6
purl pkg:pypi/ansible@2.9.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-b8cv-v25q-1kh3
11
vulnerability VCID-bvsa-kz7r-zyea
12
vulnerability VCID-d8by-xxm3-xkhb
13
vulnerability VCID-enwa-2cfn-5uab
14
vulnerability VCID-hyr1-b223-bkef
15
vulnerability VCID-j4px-r23h-9kb7
16
vulnerability VCID-kgjy-7kdy-c3cg
17
vulnerability VCID-m87b-eb5y-8ydf
18
vulnerability VCID-nx86-xnct-afbs
19
vulnerability VCID-qtt6-8kf8-1fbt
20
vulnerability VCID-rarq-tdjt-hff3
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-ydka-2etb-hue9
25
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6
aliases CVE-2020-10729, GHSA-r6h7-5pq2-j77h, PYSEC-2021-105
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-95kg-bk3s-g7gx
14
url VCID-axds-bd49-fbdj
vulnerability_id VCID-axds-bd49-fbdj
summary A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14904.json
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14904.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14904
reference_id
reference_type
scores
0
value 0.00037
scoring_system epss
scoring_elements 0.11344
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14904
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1776944
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
1
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1776944
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
21
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
22
reference_url https://github.com/advisories/GHSA-gwr8-5j83-483c
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-gwr8-5j83-483c
23
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
1
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
24
reference_url https://github.com/ansible/ansible/commit/589a415f887b6f2bb65cd07fe6b2e9d0a8156b69
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
1
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/589a415f887b6f2bb65cd07fe6b2e9d0a8156b69
25
reference_url https://github.com/ansible/ansible/commit/6a86650109b8654f5898369e45d3857624edf907
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
1
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/6a86650109b8654f5898369e45d3857624edf907
26
reference_url https://github.com/ansible/ansible/commit/a1b0f72c98b4b2afaab8aafa255e82c2075049c8
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
1
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/a1b0f72c98b4b2afaab8aafa255e82c2075049c8
27
reference_url https://github.com/ansible/ansible/pull/65686
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
1
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/65686
28
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-161.yaml
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
1
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-161.yaml
29
reference_url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
1
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
30
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-14904
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
1
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-14904
31
reference_url https://www.debian.org/security/2021/dsa-4950
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
1
value 8.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4950
32
reference_url https://access.redhat.com/errata/RHSA-2020:0215
reference_id RHSA-2020:0215
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0215
33
reference_url https://access.redhat.com/errata/RHSA-2020:0217
reference_id RHSA-2020:0217
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:0217
34
reference_url https://usn.ubuntu.com/7330-1/
reference_id USN-7330-1
reference_type
scores
url https://usn.ubuntu.com/7330-1/
fixed_packages
0
url pkg:pypi/ansible@2.7.15
purl pkg:pypi/ansible@2.7.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-aq21-sp74-17gk
12
vulnerability VCID-b423-t4kx-eqbq
13
vulnerability VCID-b8cv-v25q-1kh3
14
vulnerability VCID-brft-snn6-guc8
15
vulnerability VCID-bvsa-kz7r-zyea
16
vulnerability VCID-d8by-xxm3-xkhb
17
vulnerability VCID-enwa-2cfn-5uab
18
vulnerability VCID-gnq4-v5a7-m3ew
19
vulnerability VCID-hyr1-b223-bkef
20
vulnerability VCID-j4px-r23h-9kb7
21
vulnerability VCID-kgjy-7kdy-c3cg
22
vulnerability VCID-m87b-eb5y-8ydf
23
vulnerability VCID-n2b8-e8fa-2ue1
24
vulnerability VCID-nx86-xnct-afbs
25
vulnerability VCID-qtt6-8kf8-1fbt
26
vulnerability VCID-rarq-tdjt-hff3
27
vulnerability VCID-rnub-zmb6-5yhw
28
vulnerability VCID-uvca-5e2n-pqew
29
vulnerability VCID-xpfd-zdry-euh5
30
vulnerability VCID-zcmk-4k97-kkd9
31
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.15
1
url pkg:pypi/ansible@2.7.16
purl pkg:pypi/ansible@2.7.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-95kg-bk3s-g7gx
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-b423-t4kx-eqbq
11
vulnerability VCID-b8cv-v25q-1kh3
12
vulnerability VCID-brft-snn6-guc8
13
vulnerability VCID-bvsa-kz7r-zyea
14
vulnerability VCID-d8by-xxm3-xkhb
15
vulnerability VCID-enwa-2cfn-5uab
16
vulnerability VCID-gnq4-v5a7-m3ew
17
vulnerability VCID-hyr1-b223-bkef
18
vulnerability VCID-j4px-r23h-9kb7
19
vulnerability VCID-kgjy-7kdy-c3cg
20
vulnerability VCID-m87b-eb5y-8ydf
21
vulnerability VCID-n2b8-e8fa-2ue1
22
vulnerability VCID-nx86-xnct-afbs
23
vulnerability VCID-qtt6-8kf8-1fbt
24
vulnerability VCID-rarq-tdjt-hff3
25
vulnerability VCID-rnub-zmb6-5yhw
26
vulnerability VCID-uvca-5e2n-pqew
27
vulnerability VCID-xpfd-zdry-euh5
28
vulnerability VCID-zcmk-4k97-kkd9
29
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.16
2
url pkg:pypi/ansible@2.8.7
purl pkg:pypi/ansible@2.8.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-7d8z-g99x-7qh2
10
vulnerability VCID-95kg-bk3s-g7gx
11
vulnerability VCID-98zq-xddz-dyc8
12
vulnerability VCID-aq21-sp74-17gk
13
vulnerability VCID-b423-t4kx-eqbq
14
vulnerability VCID-b8cv-v25q-1kh3
15
vulnerability VCID-brft-snn6-guc8
16
vulnerability VCID-bvsa-kz7r-zyea
17
vulnerability VCID-d8by-xxm3-xkhb
18
vulnerability VCID-enwa-2cfn-5uab
19
vulnerability VCID-hyr1-b223-bkef
20
vulnerability VCID-j4px-r23h-9kb7
21
vulnerability VCID-kgjy-7kdy-c3cg
22
vulnerability VCID-m87b-eb5y-8ydf
23
vulnerability VCID-n2b8-e8fa-2ue1
24
vulnerability VCID-nx86-xnct-afbs
25
vulnerability VCID-qtt6-8kf8-1fbt
26
vulnerability VCID-rarq-tdjt-hff3
27
vulnerability VCID-rnub-zmb6-5yhw
28
vulnerability VCID-tfhg-gzz2-7qc5
29
vulnerability VCID-uvca-5e2n-pqew
30
vulnerability VCID-xpfd-zdry-euh5
31
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.7
3
url pkg:pypi/ansible@2.8.8
purl pkg:pypi/ansible@2.8.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-b423-t4kx-eqbq
12
vulnerability VCID-b8cv-v25q-1kh3
13
vulnerability VCID-brft-snn6-guc8
14
vulnerability VCID-bvsa-kz7r-zyea
15
vulnerability VCID-d8by-xxm3-xkhb
16
vulnerability VCID-enwa-2cfn-5uab
17
vulnerability VCID-hyr1-b223-bkef
18
vulnerability VCID-j4px-r23h-9kb7
19
vulnerability VCID-kgjy-7kdy-c3cg
20
vulnerability VCID-m87b-eb5y-8ydf
21
vulnerability VCID-n2b8-e8fa-2ue1
22
vulnerability VCID-nx86-xnct-afbs
23
vulnerability VCID-qtt6-8kf8-1fbt
24
vulnerability VCID-rarq-tdjt-hff3
25
vulnerability VCID-rnub-zmb6-5yhw
26
vulnerability VCID-tfhg-gzz2-7qc5
27
vulnerability VCID-uvca-5e2n-pqew
28
vulnerability VCID-xpfd-zdry-euh5
29
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.8
4
url pkg:pypi/ansible@2.9.2
purl pkg:pypi/ansible@2.9.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-7d8z-g99x-7qh2
10
vulnerability VCID-95kg-bk3s-g7gx
11
vulnerability VCID-98zq-xddz-dyc8
12
vulnerability VCID-b423-t4kx-eqbq
13
vulnerability VCID-b8cv-v25q-1kh3
14
vulnerability VCID-brft-snn6-guc8
15
vulnerability VCID-bvsa-kz7r-zyea
16
vulnerability VCID-d8by-xxm3-xkhb
17
vulnerability VCID-enwa-2cfn-5uab
18
vulnerability VCID-hyr1-b223-bkef
19
vulnerability VCID-j4px-r23h-9kb7
20
vulnerability VCID-kgjy-7kdy-c3cg
21
vulnerability VCID-m87b-eb5y-8ydf
22
vulnerability VCID-n2b8-e8fa-2ue1
23
vulnerability VCID-nx86-xnct-afbs
24
vulnerability VCID-qtt6-8kf8-1fbt
25
vulnerability VCID-rarq-tdjt-hff3
26
vulnerability VCID-rnub-zmb6-5yhw
27
vulnerability VCID-tfhg-gzz2-7qc5
28
vulnerability VCID-uvca-5e2n-pqew
29
vulnerability VCID-xpfd-zdry-euh5
30
vulnerability VCID-ydka-2etb-hue9
31
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.2
5
url pkg:pypi/ansible@2.9.3
purl pkg:pypi/ansible@2.9.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-b423-t4kx-eqbq
12
vulnerability VCID-b8cv-v25q-1kh3
13
vulnerability VCID-brft-snn6-guc8
14
vulnerability VCID-bvsa-kz7r-zyea
15
vulnerability VCID-d8by-xxm3-xkhb
16
vulnerability VCID-enwa-2cfn-5uab
17
vulnerability VCID-hyr1-b223-bkef
18
vulnerability VCID-j4px-r23h-9kb7
19
vulnerability VCID-kgjy-7kdy-c3cg
20
vulnerability VCID-m87b-eb5y-8ydf
21
vulnerability VCID-n2b8-e8fa-2ue1
22
vulnerability VCID-nx86-xnct-afbs
23
vulnerability VCID-qtt6-8kf8-1fbt
24
vulnerability VCID-rarq-tdjt-hff3
25
vulnerability VCID-rnub-zmb6-5yhw
26
vulnerability VCID-tfhg-gzz2-7qc5
27
vulnerability VCID-uvca-5e2n-pqew
28
vulnerability VCID-xpfd-zdry-euh5
29
vulnerability VCID-ydka-2etb-hue9
30
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.3
aliases CVE-2019-14904, GHSA-gwr8-5j83-483c, PYSEC-2020-161
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-axds-bd49-fbdj
15
url VCID-b423-t4kx-eqbq
vulnerability_id VCID-b423-t4kx-eqbq
summary A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1735.json
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1735.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1735
reference_id
reference_type
scores
0
value 0.00138
scoring_system epss
scoring_elements 0.33455
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1735
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1735
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1735
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
21
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
22
reference_url https://github.com/advisories/GHSA-gfr2-qpxh-qj9m
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-gfr2-qpxh-qj9m
23
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
24
reference_url https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes-7
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes-7
25
reference_url https://github.com/ansible/ansible/commit/18f91bbb88a84b1d3614ef41c3550da735592ac1
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/18f91bbb88a84b1d3614ef41c3550da735592ac1
26
reference_url https://github.com/ansible/ansible/commit/40969ff43812fabf5397f818d9e521f9b39c9c9a
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/40969ff43812fabf5397f818d9e521f9b39c9c9a
27
reference_url https://github.com/ansible/ansible/commit/de9a4f5474c5f5db442ae7493d6b5da7177e335d
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/de9a4f5474c5f5db442ae7493d6b5da7177e335d
28
reference_url https://github.com/ansible/ansible/issues/67793
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/67793
29
reference_url https://github.com/ansible/ansible/pull/69023
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/69023
30
reference_url https://github.com/ansible/ansible/pull/69024
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/69024
31
reference_url https://github.com/ansible/ansible/pull/69025
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/69025
32
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-7.yaml
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-7.yaml
33
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW
34
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/
35
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S
36
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/
37
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB
38
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/
39
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1735
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1735
40
reference_url https://security.gentoo.org/glsa/202006-11
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202006-11
41
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1802085
reference_id 1802085
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1802085
42
reference_url https://access.redhat.com/errata/RHSA-2020:1541
reference_id RHSA-2020:1541
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1541
43
reference_url https://access.redhat.com/errata/RHSA-2020:1542
reference_id RHSA-2020:1542
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1542
44
reference_url https://access.redhat.com/errata/RHSA-2020:1543
reference_id RHSA-2020:1543
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1543
45
reference_url https://access.redhat.com/errata/RHSA-2020:1544
reference_id RHSA-2020:1544
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1544
fixed_packages
0
url pkg:pypi/ansible@2.7.17
purl pkg:pypi/ansible@2.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6hdk-ywcn-4qe4
6
vulnerability VCID-6swz-79ue-bbef
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-gnq4-v5a7-m3ew
13
vulnerability VCID-hyr1-b223-bkef
14
vulnerability VCID-j4px-r23h-9kb7
15
vulnerability VCID-kgjy-7kdy-c3cg
16
vulnerability VCID-m87b-eb5y-8ydf
17
vulnerability VCID-nx86-xnct-afbs
18
vulnerability VCID-qtt6-8kf8-1fbt
19
vulnerability VCID-uvca-5e2n-pqew
20
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17
1
url pkg:pypi/ansible@2.7.18
purl pkg:pypi/ansible@2.7.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-95kg-bk3s-g7gx
7
vulnerability VCID-98zq-xddz-dyc8
8
vulnerability VCID-b8cv-v25q-1kh3
9
vulnerability VCID-d8by-xxm3-xkhb
10
vulnerability VCID-enwa-2cfn-5uab
11
vulnerability VCID-gnq4-v5a7-m3ew
12
vulnerability VCID-hyr1-b223-bkef
13
vulnerability VCID-j4px-r23h-9kb7
14
vulnerability VCID-kgjy-7kdy-c3cg
15
vulnerability VCID-m87b-eb5y-8ydf
16
vulnerability VCID-nx86-xnct-afbs
17
vulnerability VCID-qtt6-8kf8-1fbt
18
vulnerability VCID-uvca-5e2n-pqew
19
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.18
2
url pkg:pypi/ansible@2.8.0a1
purl pkg:pypi/ansible@2.8.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-7d8z-g99x-7qh2
11
vulnerability VCID-95kg-bk3s-g7gx
12
vulnerability VCID-98zq-xddz-dyc8
13
vulnerability VCID-aq21-sp74-17gk
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-brft-snn6-guc8
18
vulnerability VCID-bvsa-kz7r-zyea
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-mk3k-n9wn-q3ct
27
vulnerability VCID-n2b8-e8fa-2ue1
28
vulnerability VCID-nx86-xnct-afbs
29
vulnerability VCID-qtt6-8kf8-1fbt
30
vulnerability VCID-rarq-tdjt-hff3
31
vulnerability VCID-rnub-zmb6-5yhw
32
vulnerability VCID-uvca-5e2n-pqew
33
vulnerability VCID-xn7b-vz2e-6qdh
34
vulnerability VCID-xpfd-zdry-euh5
35
vulnerability VCID-zcmk-4k97-kkd9
36
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1
3
url pkg:pypi/ansible@2.8.9
purl pkg:pypi/ansible@2.8.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-b8cv-v25q-1kh3
12
vulnerability VCID-bvsa-kz7r-zyea
13
vulnerability VCID-d8by-xxm3-xkhb
14
vulnerability VCID-enwa-2cfn-5uab
15
vulnerability VCID-hyr1-b223-bkef
16
vulnerability VCID-j4px-r23h-9kb7
17
vulnerability VCID-kgjy-7kdy-c3cg
18
vulnerability VCID-m87b-eb5y-8ydf
19
vulnerability VCID-nx86-xnct-afbs
20
vulnerability VCID-qtt6-8kf8-1fbt
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9
4
url pkg:pypi/ansible@2.8.12
purl pkg:pypi/ansible@2.8.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-7d8z-g99x-7qh2
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-hyr1-b223-bkef
13
vulnerability VCID-j4px-r23h-9kb7
14
vulnerability VCID-kgjy-7kdy-c3cg
15
vulnerability VCID-m87b-eb5y-8ydf
16
vulnerability VCID-nx86-xnct-afbs
17
vulnerability VCID-qtt6-8kf8-1fbt
18
vulnerability VCID-tfhg-gzz2-7qc5
19
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.12
5
url pkg:pypi/ansible@2.9.6
purl pkg:pypi/ansible@2.9.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-b8cv-v25q-1kh3
11
vulnerability VCID-bvsa-kz7r-zyea
12
vulnerability VCID-d8by-xxm3-xkhb
13
vulnerability VCID-enwa-2cfn-5uab
14
vulnerability VCID-hyr1-b223-bkef
15
vulnerability VCID-j4px-r23h-9kb7
16
vulnerability VCID-kgjy-7kdy-c3cg
17
vulnerability VCID-m87b-eb5y-8ydf
18
vulnerability VCID-nx86-xnct-afbs
19
vulnerability VCID-qtt6-8kf8-1fbt
20
vulnerability VCID-rarq-tdjt-hff3
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-ydka-2etb-hue9
25
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6
6
url pkg:pypi/ansible@2.9.8
purl pkg:pypi/ansible@2.9.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-7d8z-g99x-7qh2
7
vulnerability VCID-98zq-xddz-dyc8
8
vulnerability VCID-b8cv-v25q-1kh3
9
vulnerability VCID-d8by-xxm3-xkhb
10
vulnerability VCID-enwa-2cfn-5uab
11
vulnerability VCID-hyr1-b223-bkef
12
vulnerability VCID-j4px-r23h-9kb7
13
vulnerability VCID-kgjy-7kdy-c3cg
14
vulnerability VCID-m87b-eb5y-8ydf
15
vulnerability VCID-nx86-xnct-afbs
16
vulnerability VCID-qtt6-8kf8-1fbt
17
vulnerability VCID-tfhg-gzz2-7qc5
18
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.8
aliases CVE-2020-1735, GHSA-gfr2-qpxh-qj9m, PYSEC-2020-7
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b423-t4kx-eqbq
16
url VCID-b8cv-v25q-1kh3
vulnerability_id VCID-b8cv-v25q-1kh3
summary An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14330.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14330.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-14330
reference_id
reference_type
scores
0
value 0.00218
scoring_system epss
scoring_elements 0.44392
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-14330
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
21
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
22
reference_url https://github.com/advisories/GHSA-785x-qw4v-6872
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-785x-qw4v-6872
23
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
24
reference_url https://github.com/ansible/ansible/commit/e0f25a2b1f9e6c21f751ba0ed2dc2eee2152983e
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/e0f25a2b1f9e6c21f751ba0ed2dc2eee2152983e
25
reference_url https://github.com/ansible/ansible/issues/68400
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/68400
26
reference_url https://github.com/ansible/ansible/pull/69653
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/69653
27
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-3.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-3.yaml
28
reference_url https://www.debian.org/security/2021/dsa-4950
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4950
29
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1856815
reference_id 1856815
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1856815
30
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-14330
reference_id CVE-2020-14330
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-14330
31
reference_url https://access.redhat.com/errata/RHSA-2020:3600
reference_id RHSA-2020:3600
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:3600
fixed_packages
0
url pkg:pypi/ansible@2.9.12
purl pkg:pypi/ansible@2.9.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-7d8z-g99x-7qh2
6
vulnerability VCID-98zq-xddz-dyc8
7
vulnerability VCID-b8cv-v25q-1kh3
8
vulnerability VCID-d8by-xxm3-xkhb
9
vulnerability VCID-enwa-2cfn-5uab
10
vulnerability VCID-hyr1-b223-bkef
11
vulnerability VCID-j4px-r23h-9kb7
12
vulnerability VCID-kgjy-7kdy-c3cg
13
vulnerability VCID-m87b-eb5y-8ydf
14
vulnerability VCID-qtt6-8kf8-1fbt
15
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.12
1
url pkg:pypi/ansible@2.10.0
purl pkg:pypi/ansible@2.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-5r2p-dxtk-pkas
2
vulnerability VCID-d8by-xxm3-xkhb
3
vulnerability VCID-hyr1-b223-bkef
4
vulnerability VCID-kgjy-7kdy-c3cg
5
vulnerability VCID-m87b-eb5y-8ydf
6
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.0
aliases CVE-2020-14330, GHSA-785x-qw4v-6872, PYSEC-2020-3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b8cv-v25q-1kh3
17
url VCID-bmq3-uckn-tfhk
vulnerability_id VCID-bmq3-uckn-tfhk
summary Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html
2
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html
3
reference_url http://packetstormsecurity.com/files/172837/Ansible-Fetch-Path-Traversal.html
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/172837/Ansible-Fetch-Path-Traversal.html
4
reference_url https://access.redhat.com/errata/RHSA-2019:3744
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3744
5
reference_url https://access.redhat.com/errata/RHSA-2019:3789
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3789
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3828.json
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3828.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-3828
reference_id
reference_type
scores
0
value 0.0003
scoring_system epss
scoring_elements 0.09087
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-3828
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3828
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3828
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10855
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10875
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16837
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16876
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3828
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3828
14
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
15
reference_url https://github.com/advisories/GHSA-74vq-h4q8-x6jv
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
3
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-74vq-h4q8-x6jv
16
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
17
reference_url https://github.com/ansible/ansible/commit/396a2f74717477d80600450e2b7e45349d7b5110
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/396a2f74717477d80600450e2b7e45349d7b5110
18
reference_url https://github.com/ansible/ansible/commit/4be3215d2f9f84ca283895879f0c6ce1ed7dd333
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/4be3215d2f9f84ca283895879f0c6ce1ed7dd333
19
reference_url https://github.com/ansible/ansible/commit/f3edc091523fbe301926b7a0db25fbbd96940d93
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/f3edc091523fbe301926b7a0db25fbbd96940d93
20
reference_url https://github.com/ansible/ansible/pull/52133
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/52133
21
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-5.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-5.yaml
22
reference_url https://usn.ubuntu.com/4072-1
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4072-1
23
reference_url https://usn.ubuntu.com/4072-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4072-1/
24
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1676689
reference_id 1676689
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1676689
25
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922537
reference_id 922537
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922537
26
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-3828
reference_id CVE-2019-3828
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-3828
27
reference_url https://access.redhat.com/errata/RHSA-2019:0430
reference_id RHSA-2019:0430
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0430
28
reference_url https://access.redhat.com/errata/RHSA-2019:0431
reference_id RHSA-2019:0431
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0431
29
reference_url https://access.redhat.com/errata/RHSA-2019:0432
reference_id RHSA-2019:0432
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0432
30
reference_url https://access.redhat.com/errata/RHSA-2019:0433
reference_id RHSA-2019:0433
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0433
fixed_packages
0
url pkg:pypi/ansible@2.5.15
purl pkg:pypi/ansible@2.5.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-46yu-yqv4-1ugb
4
vulnerability VCID-49gh-wgmc-mfew
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-95kg-bk3s-g7gx
11
vulnerability VCID-98zq-xddz-dyc8
12
vulnerability VCID-axds-bd49-fbdj
13
vulnerability VCID-b423-t4kx-eqbq
14
vulnerability VCID-b8cv-v25q-1kh3
15
vulnerability VCID-brft-snn6-guc8
16
vulnerability VCID-d8by-xxm3-xkhb
17
vulnerability VCID-enwa-2cfn-5uab
18
vulnerability VCID-gnq4-v5a7-m3ew
19
vulnerability VCID-hyr1-b223-bkef
20
vulnerability VCID-j4px-r23h-9kb7
21
vulnerability VCID-kgjy-7kdy-c3cg
22
vulnerability VCID-m87b-eb5y-8ydf
23
vulnerability VCID-n2b8-e8fa-2ue1
24
vulnerability VCID-nx86-xnct-afbs
25
vulnerability VCID-p6cz-c9ah-c7cp
26
vulnerability VCID-qtt6-8kf8-1fbt
27
vulnerability VCID-rarq-tdjt-hff3
28
vulnerability VCID-rnub-zmb6-5yhw
29
vulnerability VCID-uvca-5e2n-pqew
30
vulnerability VCID-xk7s-y611-mffc
31
vulnerability VCID-xn7b-vz2e-6qdh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.15
1
url pkg:pypi/ansible@2.6.14
purl pkg:pypi/ansible@2.6.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-52zf-mjec-f3d5
7
vulnerability VCID-5mcc-gtrr-j3e4
8
vulnerability VCID-5r2p-dxtk-pkas
9
vulnerability VCID-6hdk-ywcn-4qe4
10
vulnerability VCID-6smx-ju23-8qes
11
vulnerability VCID-6swz-79ue-bbef
12
vulnerability VCID-95kg-bk3s-g7gx
13
vulnerability VCID-98zq-xddz-dyc8
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-brft-snn6-guc8
18
vulnerability VCID-d8by-xxm3-xkhb
19
vulnerability VCID-enwa-2cfn-5uab
20
vulnerability VCID-gnq4-v5a7-m3ew
21
vulnerability VCID-hyr1-b223-bkef
22
vulnerability VCID-j4px-r23h-9kb7
23
vulnerability VCID-kgjy-7kdy-c3cg
24
vulnerability VCID-m87b-eb5y-8ydf
25
vulnerability VCID-n2b8-e8fa-2ue1
26
vulnerability VCID-nx86-xnct-afbs
27
vulnerability VCID-p6cz-c9ah-c7cp
28
vulnerability VCID-qtt6-8kf8-1fbt
29
vulnerability VCID-rarq-tdjt-hff3
30
vulnerability VCID-rnub-zmb6-5yhw
31
vulnerability VCID-uvca-5e2n-pqew
32
vulnerability VCID-xk7s-y611-mffc
33
vulnerability VCID-xn7b-vz2e-6qdh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.14
2
url pkg:pypi/ansible@2.7.8
purl pkg:pypi/ansible@2.7.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-4tfv-snmv-bbax
7
vulnerability VCID-52zf-mjec-f3d5
8
vulnerability VCID-5mcc-gtrr-j3e4
9
vulnerability VCID-5r2p-dxtk-pkas
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-95kg-bk3s-g7gx
14
vulnerability VCID-98zq-xddz-dyc8
15
vulnerability VCID-aq21-sp74-17gk
16
vulnerability VCID-axds-bd49-fbdj
17
vulnerability VCID-b423-t4kx-eqbq
18
vulnerability VCID-b8cv-v25q-1kh3
19
vulnerability VCID-brft-snn6-guc8
20
vulnerability VCID-bvsa-kz7r-zyea
21
vulnerability VCID-d8by-xxm3-xkhb
22
vulnerability VCID-enwa-2cfn-5uab
23
vulnerability VCID-gnq4-v5a7-m3ew
24
vulnerability VCID-hyr1-b223-bkef
25
vulnerability VCID-j4px-r23h-9kb7
26
vulnerability VCID-kgjy-7kdy-c3cg
27
vulnerability VCID-m87b-eb5y-8ydf
28
vulnerability VCID-n2b8-e8fa-2ue1
29
vulnerability VCID-nx86-xnct-afbs
30
vulnerability VCID-p6cz-c9ah-c7cp
31
vulnerability VCID-qtt6-8kf8-1fbt
32
vulnerability VCID-rarq-tdjt-hff3
33
vulnerability VCID-rnub-zmb6-5yhw
34
vulnerability VCID-uvca-5e2n-pqew
35
vulnerability VCID-vctt-ev3n-zkf8
36
vulnerability VCID-xk7s-y611-mffc
37
vulnerability VCID-xn7b-vz2e-6qdh
38
vulnerability VCID-xpfd-zdry-euh5
39
vulnerability VCID-zcmk-4k97-kkd9
40
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.8
aliases CVE-2019-3828, GHSA-74vq-h4q8-x6jv, PYSEC-2019-5
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bmq3-uckn-tfhk
18
url VCID-brft-snn6-guc8
vulnerability_id VCID-brft-snn6-guc8
summary A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path traversal. This issue is fixed in 2.10.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1737.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1737.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1737
reference_id
reference_type
scores
0
value 0.00155
scoring_system epss
scoring_elements 0.35898
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1737
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1737
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1737
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/advisories/GHSA-893h-35v4-mxqx
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-893h-35v4-mxqx
5
reference_url https://github.com/ansible/ansible/issues/67795
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/67795
6
reference_url https://github.com/ansible/ansible/pull/67799
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/67799
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-9.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-9.yaml
8
reference_url https://github.com/samdoran/ansible
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/samdoran/ansible
9
reference_url https://github.com/samdoran/ansible/commit/1de638b4d38d6d916588e2ad48d01f90dab8c36d
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/samdoran/ansible/commit/1de638b4d38d6d916588e2ad48d01f90dab8c36d
10
reference_url https://github.com/samdoran/ansible/commit/aaf549d7870b8687209a3282841b59207735b676
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/samdoran/ansible/commit/aaf549d7870b8687209a3282841b59207735b676
11
reference_url https://github.com/samdoran/ansible/commit/b60aa26e2313a8d52c0e0d3fd01696e797605b72
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/samdoran/ansible/commit/b60aa26e2313a8d52c0e0d3fd01696e797605b72
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1737
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1737
19
reference_url https://security.gentoo.org/glsa/202006-11
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202006-11
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1802154
reference_id 1802154
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1802154
21
reference_url https://access.redhat.com/errata/RHSA-2020:1541
reference_id RHSA-2020:1541
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1541
22
reference_url https://access.redhat.com/errata/RHSA-2020:1542
reference_id RHSA-2020:1542
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1542
23
reference_url https://access.redhat.com/errata/RHSA-2020:1543
reference_id RHSA-2020:1543
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1543
24
reference_url https://access.redhat.com/errata/RHSA-2020:1544
reference_id RHSA-2020:1544
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1544
fixed_packages
0
url pkg:pypi/ansible@2.7.17
purl pkg:pypi/ansible@2.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6hdk-ywcn-4qe4
6
vulnerability VCID-6swz-79ue-bbef
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-gnq4-v5a7-m3ew
13
vulnerability VCID-hyr1-b223-bkef
14
vulnerability VCID-j4px-r23h-9kb7
15
vulnerability VCID-kgjy-7kdy-c3cg
16
vulnerability VCID-m87b-eb5y-8ydf
17
vulnerability VCID-nx86-xnct-afbs
18
vulnerability VCID-qtt6-8kf8-1fbt
19
vulnerability VCID-uvca-5e2n-pqew
20
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17
1
url pkg:pypi/ansible@2.8.0a1
purl pkg:pypi/ansible@2.8.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-7d8z-g99x-7qh2
11
vulnerability VCID-95kg-bk3s-g7gx
12
vulnerability VCID-98zq-xddz-dyc8
13
vulnerability VCID-aq21-sp74-17gk
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-brft-snn6-guc8
18
vulnerability VCID-bvsa-kz7r-zyea
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-mk3k-n9wn-q3ct
27
vulnerability VCID-n2b8-e8fa-2ue1
28
vulnerability VCID-nx86-xnct-afbs
29
vulnerability VCID-qtt6-8kf8-1fbt
30
vulnerability VCID-rarq-tdjt-hff3
31
vulnerability VCID-rnub-zmb6-5yhw
32
vulnerability VCID-uvca-5e2n-pqew
33
vulnerability VCID-xn7b-vz2e-6qdh
34
vulnerability VCID-xpfd-zdry-euh5
35
vulnerability VCID-zcmk-4k97-kkd9
36
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1
2
url pkg:pypi/ansible@2.8.9
purl pkg:pypi/ansible@2.8.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-b8cv-v25q-1kh3
12
vulnerability VCID-bvsa-kz7r-zyea
13
vulnerability VCID-d8by-xxm3-xkhb
14
vulnerability VCID-enwa-2cfn-5uab
15
vulnerability VCID-hyr1-b223-bkef
16
vulnerability VCID-j4px-r23h-9kb7
17
vulnerability VCID-kgjy-7kdy-c3cg
18
vulnerability VCID-m87b-eb5y-8ydf
19
vulnerability VCID-nx86-xnct-afbs
20
vulnerability VCID-qtt6-8kf8-1fbt
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9
3
url pkg:pypi/ansible@2.9.6
purl pkg:pypi/ansible@2.9.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-b8cv-v25q-1kh3
11
vulnerability VCID-bvsa-kz7r-zyea
12
vulnerability VCID-d8by-xxm3-xkhb
13
vulnerability VCID-enwa-2cfn-5uab
14
vulnerability VCID-hyr1-b223-bkef
15
vulnerability VCID-j4px-r23h-9kb7
16
vulnerability VCID-kgjy-7kdy-c3cg
17
vulnerability VCID-m87b-eb5y-8ydf
18
vulnerability VCID-nx86-xnct-afbs
19
vulnerability VCID-qtt6-8kf8-1fbt
20
vulnerability VCID-rarq-tdjt-hff3
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-ydka-2etb-hue9
25
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6
aliases CVE-2020-1737, GHSA-893h-35v4-mxqx, PYSEC-2020-9
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-brft-snn6-guc8
19
url VCID-d8by-xxm3-xkhb
vulnerability_id VCID-d8by-xxm3-xkhb
summary 
Ansible Community General Collection is vulnerable to exposure of sensitive information
A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and potentially compromise Keycloak accounts or administrative access.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14010.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14010.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-14010
reference_id
reference_type
scores
0
value 0.00021
scoring_system epss
scoring_elements 0.06095
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-14010
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2418774
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T13:11:04Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2418774
3
reference_url https://github.com/ansible-collections/community.general
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible-collections/community.general
4
reference_url https://github.com/ansible-collections/community.general/commit/08e56bbb9b57740a879d3057d84cdb02a162b840
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible-collections/community.general/commit/08e56bbb9b57740a879d3057d84cdb02a162b840
5
reference_url https://github.com/ansible-collections/community.general/commit/54af64ad363efe280b34102d2637fe272c1f7320
reference_id
reference_type
scores
url https://github.com/ansible-collections/community.general/commit/54af64ad363efe280b34102d2637fe272c1f7320
6
reference_url https://github.com/ansible-collections/community.general/issues/11000
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T13:11:04Z/
url https://github.com/ansible-collections/community.general/issues/11000
7
reference_url https://github.com/ansible-collections/community.general/pull/11005
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T13:11:04Z/
url https://github.com/ansible-collections/community.general/pull/11005
8
reference_url https://github.com/ansible-community/ansible-build-data/blob/12.2.0/12/CHANGELOG-v12.md#security-fixes
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible-community/ansible-build-data/blob/12.2.0/12/CHANGELOG-v12.md#security-fixes
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121951
reference_id 1121951
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121951
10
reference_url https://github.com/ansible-community/ansible-build-data/blob/main/12/CHANGELOG-v12.md#security-fixes
reference_id CHANGELOG-v12.md#security-fixes
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T13:11:04Z/
url https://github.com/ansible-community/ansible-build-data/blob/main/12/CHANGELOG-v12.md#security-fixes
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:5
reference_id cpe:/a:redhat:ceph_storage:5
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:5
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:6
reference_id cpe:/a:redhat:ceph_storage:6
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:6
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:7
reference_id cpe:/a:redhat:ceph_storage:7
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:7
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:8
reference_id cpe:/a:redhat:ceph_storage:8
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:ceph_storage:8
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:17.1
reference_id cpe:/a:redhat:openstack:17.1
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:17.1
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:18.0
reference_id cpe:/a:redhat:openstack:18.0
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openstack:18.0
17
reference_url https://access.redhat.com/security/cve/CVE-2025-14010
reference_id CVE-2025-14010
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-20T13:11:04Z/
url https://access.redhat.com/security/cve/CVE-2025-14010
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-14010
reference_id CVE-2025-14010
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-14010
19
reference_url https://github.com/advisories/GHSA-8ggh-xwr9-3373
reference_id GHSA-8ggh-xwr9-3373
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8ggh-xwr9-3373
fixed_packages
0
url pkg:pypi/ansible@12.0.0
purl pkg:pypi/ansible@12.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@12.0.0
1
url pkg:pypi/ansible@12.2.0
purl pkg:pypi/ansible@12.2.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@12.2.0
aliases CVE-2025-14010, GHSA-8ggh-xwr9-3373
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d8by-xxm3-xkhb
20
url VCID-enwa-2cfn-5uab
vulnerability_id VCID-enwa-2cfn-5uab
summary arbitrary command execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3583.json
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3583.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3583
reference_id
reference_type
scores
0
value 0.00276
scoring_system epss
scoring_elements 0.51217
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3583
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1968412
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1968412
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/advisories/GHSA-2pfh-q76x-gwvm
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-2pfh-q76x-gwvm
5
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
6
reference_url https://github.com/ansible/ansible/commit/03aff644cc1c00e1f7551195c68fbd0d13a39e6e
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/03aff644cc1c00e1f7551195c68fbd0d13a39e6e
7
reference_url https://github.com/ansible/ansible/commit/8aa850e3573e48c9a2f12aef84e8a3a6f5ba4847
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/8aa850e3573e48c9a2f12aef84e8a3a6f5ba4847
8
reference_url https://github.com/ansible/ansible/commit/8b17e5b9229ffaecfe10a4881bc3f87dd2c184e1
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/8b17e5b9229ffaecfe10a4881bc3f87dd2c184e1
9
reference_url https://github.com/ansible/ansible/pull/74960
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/74960
10
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-358.yaml
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-358.yaml
11
reference_url https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
12
reference_url https://security.archlinux.org/AVG-2260
reference_id AVG-2260
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2260
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3583
reference_id CVE-2021-3583
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3583
14
reference_url https://access.redhat.com/errata/RHSA-2021:2663
reference_id RHSA-2021:2663
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2663
15
reference_url https://access.redhat.com/errata/RHSA-2021:2664
reference_id RHSA-2021:2664
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2664
16
reference_url https://usn.ubuntu.com/USN-5315-1/
reference_id USN-USN-5315-1
reference_type
scores
url https://usn.ubuntu.com/USN-5315-1/
fixed_packages
0
url pkg:pypi/ansible@2.9.23rc1
purl pkg:pypi/ansible@2.9.23rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-5r2p-dxtk-pkas
2
vulnerability VCID-98zq-xddz-dyc8
3
vulnerability VCID-b8cv-v25q-1kh3
4
vulnerability VCID-d8by-xxm3-xkhb
5
vulnerability VCID-enwa-2cfn-5uab
6
vulnerability VCID-hyr1-b223-bkef
7
vulnerability VCID-kgjy-7kdy-c3cg
8
vulnerability VCID-m87b-eb5y-8ydf
9
vulnerability VCID-qtt6-8kf8-1fbt
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.23rc1
1
url pkg:pypi/ansible@2.9.23
purl pkg:pypi/ansible@2.9.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-5r2p-dxtk-pkas
2
vulnerability VCID-98zq-xddz-dyc8
3
vulnerability VCID-b8cv-v25q-1kh3
4
vulnerability VCID-d8by-xxm3-xkhb
5
vulnerability VCID-hyr1-b223-bkef
6
vulnerability VCID-kgjy-7kdy-c3cg
7
vulnerability VCID-m87b-eb5y-8ydf
8
vulnerability VCID-qtt6-8kf8-1fbt
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.23
2
url pkg:pypi/ansible@2.10.11rc1
purl pkg:pypi/ansible@2.10.11rc1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.11rc1
3
url pkg:pypi/ansible@2.11.2rc1
purl pkg:pypi/ansible@2.11.2rc1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.11.2rc1
aliases CVE-2021-3583, GHSA-2pfh-q76x-gwvm, PYSEC-2021-358
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-enwa-2cfn-5uab
21
url VCID-gnq4-v5a7-m3ew
vulnerability_id VCID-gnq4-v5a7-m3ew
summary A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to the module will cause the task to fail before the no_log options in the sub parameters are processed. As a result, data in the sub parameter fields will not be masked and will be displayed if Ansible is run with increased verbosity and present in the module invocation arguments for the task.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html
2
reference_url https://access.redhat.com/errata/RHSA-2019:3201
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3201
3
reference_url https://access.redhat.com/errata/RHSA-2019:3202
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3202
4
reference_url https://access.redhat.com/errata/RHSA-2019:3203
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3203
5
reference_url https://access.redhat.com/errata/RHSA-2019:3207
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3207
6
reference_url https://access.redhat.com/errata/RHSA-2020:0756
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0756
7
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14858.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14858.json
8
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-14858
reference_id
reference_type
scores
0
value 0.00041
scoring_system epss
scoring_elements 0.1264
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-14858
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14858
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14858
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
12
reference_url https://github.com/ansible/ansible/commit/0fd656e9964a91f2e8b1e9bbf78c74661ab9d37b
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/0fd656e9964a91f2e8b1e9bbf78c74661ab9d37b
13
reference_url https://github.com/ansible/ansible/commit/3dfb8e81bb5f776a6b00c7a90dd087e85b71f8bb
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/3dfb8e81bb5f776a6b00c7a90dd087e85b71f8bb
14
reference_url https://github.com/ansible/ansible/commit/87f8d77d70476454f7fe2381bd363a329ce4266c
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/87f8d77d70476454f7fe2381bd363a329ce4266c
15
reference_url https://github.com/ansible/ansible/commit/f610ed3a4eb87eb557200606279796921fa9b722
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/f610ed3a4eb87eb557200606279796921fa9b722
16
reference_url https://github.com/ansible/ansible/pull/63405
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/63405
17
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-171.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-171.yaml
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-14858
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-14858
19
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1760593
reference_id 1760593
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1760593
20
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942332
reference_id 942332
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942332
21
reference_url https://github.com/advisories/GHSA-h653-95qw-h2mp
reference_id GHSA-h653-95qw-h2mp
reference_type
scores
url https://github.com/advisories/GHSA-h653-95qw-h2mp
fixed_packages
0
url pkg:pypi/ansible@2.6.20
purl pkg:pypi/ansible@2.6.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-95kg-bk3s-g7gx
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-axds-bd49-fbdj
11
vulnerability VCID-b423-t4kx-eqbq
12
vulnerability VCID-b8cv-v25q-1kh3
13
vulnerability VCID-brft-snn6-guc8
14
vulnerability VCID-d8by-xxm3-xkhb
15
vulnerability VCID-enwa-2cfn-5uab
16
vulnerability VCID-gnq4-v5a7-m3ew
17
vulnerability VCID-hyr1-b223-bkef
18
vulnerability VCID-j4px-r23h-9kb7
19
vulnerability VCID-kgjy-7kdy-c3cg
20
vulnerability VCID-m87b-eb5y-8ydf
21
vulnerability VCID-n2b8-e8fa-2ue1
22
vulnerability VCID-nx86-xnct-afbs
23
vulnerability VCID-p6cz-c9ah-c7cp
24
vulnerability VCID-qtt6-8kf8-1fbt
25
vulnerability VCID-rarq-tdjt-hff3
26
vulnerability VCID-rnub-zmb6-5yhw
27
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.20
1
url pkg:pypi/ansible@2.7.14
purl pkg:pypi/ansible@2.7.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-aq21-sp74-17gk
12
vulnerability VCID-axds-bd49-fbdj
13
vulnerability VCID-b423-t4kx-eqbq
14
vulnerability VCID-b8cv-v25q-1kh3
15
vulnerability VCID-brft-snn6-guc8
16
vulnerability VCID-bvsa-kz7r-zyea
17
vulnerability VCID-d8by-xxm3-xkhb
18
vulnerability VCID-enwa-2cfn-5uab
19
vulnerability VCID-gnq4-v5a7-m3ew
20
vulnerability VCID-hyr1-b223-bkef
21
vulnerability VCID-j4px-r23h-9kb7
22
vulnerability VCID-kgjy-7kdy-c3cg
23
vulnerability VCID-m87b-eb5y-8ydf
24
vulnerability VCID-n2b8-e8fa-2ue1
25
vulnerability VCID-nx86-xnct-afbs
26
vulnerability VCID-p6cz-c9ah-c7cp
27
vulnerability VCID-qtt6-8kf8-1fbt
28
vulnerability VCID-rarq-tdjt-hff3
29
vulnerability VCID-rnub-zmb6-5yhw
30
vulnerability VCID-uvca-5e2n-pqew
31
vulnerability VCID-vctt-ev3n-zkf8
32
vulnerability VCID-xpfd-zdry-euh5
33
vulnerability VCID-zcmk-4k97-kkd9
34
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.14
2
url pkg:pypi/ansible@2.8.1
purl pkg:pypi/ansible@2.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-4tfv-snmv-bbax
7
vulnerability VCID-52zf-mjec-f3d5
8
vulnerability VCID-5mcc-gtrr-j3e4
9
vulnerability VCID-5r2p-dxtk-pkas
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-7d8z-g99x-7qh2
14
vulnerability VCID-95kg-bk3s-g7gx
15
vulnerability VCID-98zq-xddz-dyc8
16
vulnerability VCID-aq21-sp74-17gk
17
vulnerability VCID-axds-bd49-fbdj
18
vulnerability VCID-b423-t4kx-eqbq
19
vulnerability VCID-b8cv-v25q-1kh3
20
vulnerability VCID-brft-snn6-guc8
21
vulnerability VCID-bvsa-kz7r-zyea
22
vulnerability VCID-d8by-xxm3-xkhb
23
vulnerability VCID-enwa-2cfn-5uab
24
vulnerability VCID-gnq4-v5a7-m3ew
25
vulnerability VCID-hyr1-b223-bkef
26
vulnerability VCID-j4px-r23h-9kb7
27
vulnerability VCID-kgjy-7kdy-c3cg
28
vulnerability VCID-m87b-eb5y-8ydf
29
vulnerability VCID-mk3k-n9wn-q3ct
30
vulnerability VCID-n2b8-e8fa-2ue1
31
vulnerability VCID-nx86-xnct-afbs
32
vulnerability VCID-p6cz-c9ah-c7cp
33
vulnerability VCID-qtt6-8kf8-1fbt
34
vulnerability VCID-rarq-tdjt-hff3
35
vulnerability VCID-rnub-zmb6-5yhw
36
vulnerability VCID-sdv2-h8d8-9ydj
37
vulnerability VCID-tfhg-gzz2-7qc5
38
vulnerability VCID-uvca-5e2n-pqew
39
vulnerability VCID-vctt-ev3n-zkf8
40
vulnerability VCID-xk7s-y611-mffc
41
vulnerability VCID-xn7b-vz2e-6qdh
42
vulnerability VCID-xpfd-zdry-euh5
43
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.1
3
url pkg:pypi/ansible@2.8.6
purl pkg:pypi/ansible@2.8.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-7d8z-g99x-7qh2
10
vulnerability VCID-95kg-bk3s-g7gx
11
vulnerability VCID-98zq-xddz-dyc8
12
vulnerability VCID-aq21-sp74-17gk
13
vulnerability VCID-axds-bd49-fbdj
14
vulnerability VCID-b423-t4kx-eqbq
15
vulnerability VCID-b8cv-v25q-1kh3
16
vulnerability VCID-brft-snn6-guc8
17
vulnerability VCID-bvsa-kz7r-zyea
18
vulnerability VCID-d8by-xxm3-xkhb
19
vulnerability VCID-enwa-2cfn-5uab
20
vulnerability VCID-hyr1-b223-bkef
21
vulnerability VCID-j4px-r23h-9kb7
22
vulnerability VCID-kgjy-7kdy-c3cg
23
vulnerability VCID-m87b-eb5y-8ydf
24
vulnerability VCID-n2b8-e8fa-2ue1
25
vulnerability VCID-nx86-xnct-afbs
26
vulnerability VCID-p6cz-c9ah-c7cp
27
vulnerability VCID-qtt6-8kf8-1fbt
28
vulnerability VCID-rarq-tdjt-hff3
29
vulnerability VCID-rnub-zmb6-5yhw
30
vulnerability VCID-tfhg-gzz2-7qc5
31
vulnerability VCID-uvca-5e2n-pqew
32
vulnerability VCID-vctt-ev3n-zkf8
33
vulnerability VCID-xpfd-zdry-euh5
34
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.6
4
url pkg:pypi/ansible@2.9.0rc4
purl pkg:pypi/ansible@2.9.0rc4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-b8cv-v25q-1kh3
12
vulnerability VCID-bvsa-kz7r-zyea
13
vulnerability VCID-d8by-xxm3-xkhb
14
vulnerability VCID-enwa-2cfn-5uab
15
vulnerability VCID-hyr1-b223-bkef
16
vulnerability VCID-j4px-r23h-9kb7
17
vulnerability VCID-kgjy-7kdy-c3cg
18
vulnerability VCID-m87b-eb5y-8ydf
19
vulnerability VCID-nx86-xnct-afbs
20
vulnerability VCID-qtt6-8kf8-1fbt
21
vulnerability VCID-uvca-5e2n-pqew
22
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.0rc4
aliases CVE-2019-14858, GHSA-h653-95qw-h2mp, PYSEC-2019-171
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gnq4-v5a7-m3ew
22
url VCID-hyr1-b223-bkef
vulnerability_id VCID-hyr1-b223-bkef
summary A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions before the move. This could lead to the disclosure of sensitive data. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1736.json
reference_id
reference_type
scores
0
value 2.2
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1736.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1736
reference_id
reference_type
scores
0
value 0.00059
scoring_system epss
scoring_elements 0.18673
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1736
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1736
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 4.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1736
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/advisories/GHSA-x7jh-595q-wq82
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 4.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-x7jh-595q-wq82
5
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 4.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
6
reference_url https://github.com/ansible/ansible/issues/67794
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 4.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/67794
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-8.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 4.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-8.yaml
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 4.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NYYQP2XJB2TTRP6AKWVMBSPB2DFJNKD/
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 4.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNZWBAUP4ZHUR6PO7U6ZXEKNCX62KZ7/
12
reference_url https://security.gentoo.org/glsa/202006-11
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 4.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202006-11
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1802124
reference_id 1802124
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1802124
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966663
reference_id 966663
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966663
15
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1736
reference_id CVE-2020-1736
reference_type
scores
0
value 3.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 4.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1736
16
reference_url https://access.redhat.com/errata/RHSA-2020:3600
reference_id RHSA-2020:3600
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:3600
fixed_packages
0
url pkg:pypi/ansible@2.7.17
purl pkg:pypi/ansible@2.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6hdk-ywcn-4qe4
6
vulnerability VCID-6swz-79ue-bbef
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-gnq4-v5a7-m3ew
13
vulnerability VCID-hyr1-b223-bkef
14
vulnerability VCID-j4px-r23h-9kb7
15
vulnerability VCID-kgjy-7kdy-c3cg
16
vulnerability VCID-m87b-eb5y-8ydf
17
vulnerability VCID-nx86-xnct-afbs
18
vulnerability VCID-qtt6-8kf8-1fbt
19
vulnerability VCID-uvca-5e2n-pqew
20
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17
1
url pkg:pypi/ansible@2.8.9
purl pkg:pypi/ansible@2.8.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-b8cv-v25q-1kh3
12
vulnerability VCID-bvsa-kz7r-zyea
13
vulnerability VCID-d8by-xxm3-xkhb
14
vulnerability VCID-enwa-2cfn-5uab
15
vulnerability VCID-hyr1-b223-bkef
16
vulnerability VCID-j4px-r23h-9kb7
17
vulnerability VCID-kgjy-7kdy-c3cg
18
vulnerability VCID-m87b-eb5y-8ydf
19
vulnerability VCID-nx86-xnct-afbs
20
vulnerability VCID-qtt6-8kf8-1fbt
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9
2
url pkg:pypi/ansible@2.9.6
purl pkg:pypi/ansible@2.9.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-b8cv-v25q-1kh3
11
vulnerability VCID-bvsa-kz7r-zyea
12
vulnerability VCID-d8by-xxm3-xkhb
13
vulnerability VCID-enwa-2cfn-5uab
14
vulnerability VCID-hyr1-b223-bkef
15
vulnerability VCID-j4px-r23h-9kb7
16
vulnerability VCID-kgjy-7kdy-c3cg
17
vulnerability VCID-m87b-eb5y-8ydf
18
vulnerability VCID-nx86-xnct-afbs
19
vulnerability VCID-qtt6-8kf8-1fbt
20
vulnerability VCID-rarq-tdjt-hff3
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-ydka-2etb-hue9
25
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6
3
url pkg:pypi/ansible@2.10.1
purl pkg:pypi/ansible@2.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-5r2p-dxtk-pkas
2
vulnerability VCID-d8by-xxm3-xkhb
3
vulnerability VCID-kgjy-7kdy-c3cg
4
vulnerability VCID-sy8p-asn6-p3d3
5
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.1
aliases CVE-2020-1736, GHSA-x7jh-595q-wq82, PYSEC-2020-8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hyr1-b223-bkef
23
url VCID-j4px-r23h-9kb7
vulnerability_id VCID-j4px-r23h-9kb7
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-20178
reference_id
reference_type
scores
0
value 0.00389
scoring_system epss
scoring_elements 0.60253
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-20178
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1914774
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1914774
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-20178
reference_id CVE-2020-20178
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2020-20178
fixed_packages
0
url pkg:pypi/ansible@2.9.18
purl pkg:pypi/ansible@2.9.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-5r2p-dxtk-pkas
3
vulnerability VCID-98zq-xddz-dyc8
4
vulnerability VCID-b8cv-v25q-1kh3
5
vulnerability VCID-d8by-xxm3-xkhb
6
vulnerability VCID-enwa-2cfn-5uab
7
vulnerability VCID-hyr1-b223-bkef
8
vulnerability VCID-kgjy-7kdy-c3cg
9
vulnerability VCID-m87b-eb5y-8ydf
10
vulnerability VCID-qtt6-8kf8-1fbt
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18
aliases CVE-2020-20178
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j4px-r23h-9kb7
24
url VCID-kgjy-7kdy-c3cg
vulnerability_id VCID-kgjy-7kdy-c3cg
summary information disclosure
references
0
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1956477
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1956477
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://security.archlinux.org/AVG-2056
reference_id AVG-2056
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2056
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3533
reference_id CVE-2021-3533
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-3533
fixed_packages
0
url pkg:pypi/ansible@3.0.0
purl pkg:pypi/ansible@3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-d8by-xxm3-xkhb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@3.0.0
aliases CVE-2021-3533, PYSEC-2021-126
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kgjy-7kdy-c3cg
25
url VCID-m87b-eb5y-8ydf
vulnerability_id VCID-m87b-eb5y-8ydf
summary A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25635.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-25635.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-25635
reference_id
reference_type
scores
0
value 0.0008
scoring_system epss
scoring_elements 0.236
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-25635
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635
3
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
4
reference_url https://github.com/ansible-collections/community.aws/issues/222
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible-collections/community.aws/issues/222
5
reference_url https://github.com/ansible-collections/community.aws/pull/237#issuecomment-1468591094
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible-collections/community.aws/pull/237#issuecomment-1468591094
6
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-220.yaml
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-220.yaml
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1880275
reference_id 1880275
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1880275
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-25635
reference_id CVE-2020-25635
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-25635
9
reference_url https://github.com/advisories/GHSA-f556-49jc-4rvc
reference_id GHSA-f556-49jc-4rvc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f556-49jc-4rvc
fixed_packages
0
url pkg:pypi/ansible@2.10.1
purl pkg:pypi/ansible@2.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-5r2p-dxtk-pkas
2
vulnerability VCID-d8by-xxm3-xkhb
3
vulnerability VCID-kgjy-7kdy-c3cg
4
vulnerability VCID-sy8p-asn6-p3d3
5
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.1
aliases CVE-2020-25635, GHSA-f556-49jc-4rvc, PYSEC-2020-220
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m87b-eb5y-8ydf
26
url VCID-n2b8-e8fa-2ue1
vulnerability_id VCID-n2b8-e8fa-2ue1
summary A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, as it is created in a temporary file with mkstemp and the returned file descriptor is closed and the method write_data is called to write the existing secret in the file. This method will delete the file before recreating it insecurely. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1740.json
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1740.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1740
reference_id
reference_type
scores
0
value 0.00145
scoring_system epss
scoring_elements 0.34646
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1740
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1740
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
21
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
22
reference_url https://github.com/advisories/GHSA-vcg8-98q8-g7mj
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-vcg8-98q8-g7mj
23
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
24
reference_url https://github.com/ansible/ansible/commit/28f9fbdb5e281976e33f443193047068afb97a9b
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/28f9fbdb5e281976e33f443193047068afb97a9b
25
reference_url https://github.com/ansible/ansible/commit/2a563514f070a0a8ba64aebf6bce21194be96c73
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/2a563514f070a0a8ba64aebf6bce21194be96c73
26
reference_url https://github.com/ansible/ansible/commit/685a4b6d3ff72186d2b4ffce73172a5446a71ccc
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/685a4b6d3ff72186d2b4ffce73172a5446a71ccc
27
reference_url https://github.com/ansible/ansible/commit/ef32a5bf96a89107986375516285253c1380d7ef
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/ef32a5bf96a89107986375516285253c1380d7ef
28
reference_url https://github.com/ansible/ansible/issues/67798
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/67798
29
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-12.yaml
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-12.yaml
30
reference_url https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html
31
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW
32
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/
33
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S
34
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/
35
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB
36
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/
37
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1740
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1740
38
reference_url https://security.gentoo.org/glsa/202006-11
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 5.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202006-11
39
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1802193
reference_id 1802193
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1802193
40
reference_url https://access.redhat.com/errata/RHSA-2020:1541
reference_id RHSA-2020:1541
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1541
41
reference_url https://access.redhat.com/errata/RHSA-2020:1542
reference_id RHSA-2020:1542
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1542
42
reference_url https://access.redhat.com/errata/RHSA-2020:1543
reference_id RHSA-2020:1543
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1543
43
reference_url https://access.redhat.com/errata/RHSA-2020:1544
reference_id RHSA-2020:1544
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1544
fixed_packages
0
url pkg:pypi/ansible@2.7.17
purl pkg:pypi/ansible@2.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6hdk-ywcn-4qe4
6
vulnerability VCID-6swz-79ue-bbef
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-gnq4-v5a7-m3ew
13
vulnerability VCID-hyr1-b223-bkef
14
vulnerability VCID-j4px-r23h-9kb7
15
vulnerability VCID-kgjy-7kdy-c3cg
16
vulnerability VCID-m87b-eb5y-8ydf
17
vulnerability VCID-nx86-xnct-afbs
18
vulnerability VCID-qtt6-8kf8-1fbt
19
vulnerability VCID-uvca-5e2n-pqew
20
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17
1
url pkg:pypi/ansible@2.8.0a1
purl pkg:pypi/ansible@2.8.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-7d8z-g99x-7qh2
11
vulnerability VCID-95kg-bk3s-g7gx
12
vulnerability VCID-98zq-xddz-dyc8
13
vulnerability VCID-aq21-sp74-17gk
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-brft-snn6-guc8
18
vulnerability VCID-bvsa-kz7r-zyea
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-mk3k-n9wn-q3ct
27
vulnerability VCID-n2b8-e8fa-2ue1
28
vulnerability VCID-nx86-xnct-afbs
29
vulnerability VCID-qtt6-8kf8-1fbt
30
vulnerability VCID-rarq-tdjt-hff3
31
vulnerability VCID-rnub-zmb6-5yhw
32
vulnerability VCID-uvca-5e2n-pqew
33
vulnerability VCID-xn7b-vz2e-6qdh
34
vulnerability VCID-xpfd-zdry-euh5
35
vulnerability VCID-zcmk-4k97-kkd9
36
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1
2
url pkg:pypi/ansible@2.8.9
purl pkg:pypi/ansible@2.8.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-b8cv-v25q-1kh3
12
vulnerability VCID-bvsa-kz7r-zyea
13
vulnerability VCID-d8by-xxm3-xkhb
14
vulnerability VCID-enwa-2cfn-5uab
15
vulnerability VCID-hyr1-b223-bkef
16
vulnerability VCID-j4px-r23h-9kb7
17
vulnerability VCID-kgjy-7kdy-c3cg
18
vulnerability VCID-m87b-eb5y-8ydf
19
vulnerability VCID-nx86-xnct-afbs
20
vulnerability VCID-qtt6-8kf8-1fbt
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9
3
url pkg:pypi/ansible@2.8.11
purl pkg:pypi/ansible@2.8.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-7d8z-g99x-7qh2
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-hyr1-b223-bkef
13
vulnerability VCID-j4px-r23h-9kb7
14
vulnerability VCID-kgjy-7kdy-c3cg
15
vulnerability VCID-m87b-eb5y-8ydf
16
vulnerability VCID-nx86-xnct-afbs
17
vulnerability VCID-qtt6-8kf8-1fbt
18
vulnerability VCID-tfhg-gzz2-7qc5
19
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11
4
url pkg:pypi/ansible@2.9.6
purl pkg:pypi/ansible@2.9.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-b8cv-v25q-1kh3
11
vulnerability VCID-bvsa-kz7r-zyea
12
vulnerability VCID-d8by-xxm3-xkhb
13
vulnerability VCID-enwa-2cfn-5uab
14
vulnerability VCID-hyr1-b223-bkef
15
vulnerability VCID-j4px-r23h-9kb7
16
vulnerability VCID-kgjy-7kdy-c3cg
17
vulnerability VCID-m87b-eb5y-8ydf
18
vulnerability VCID-nx86-xnct-afbs
19
vulnerability VCID-qtt6-8kf8-1fbt
20
vulnerability VCID-rarq-tdjt-hff3
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-ydka-2etb-hue9
25
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6
5
url pkg:pypi/ansible@2.9.7
purl pkg:pypi/ansible@2.9.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-7d8z-g99x-7qh2
7
vulnerability VCID-98zq-xddz-dyc8
8
vulnerability VCID-b8cv-v25q-1kh3
9
vulnerability VCID-d8by-xxm3-xkhb
10
vulnerability VCID-enwa-2cfn-5uab
11
vulnerability VCID-hyr1-b223-bkef
12
vulnerability VCID-j4px-r23h-9kb7
13
vulnerability VCID-kgjy-7kdy-c3cg
14
vulnerability VCID-m87b-eb5y-8ydf
15
vulnerability VCID-nx86-xnct-afbs
16
vulnerability VCID-qtt6-8kf8-1fbt
17
vulnerability VCID-tfhg-gzz2-7qc5
18
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7
aliases CVE-2020-1740, GHSA-vcg8-98q8-g7mj, PYSEC-2020-12
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n2b8-e8fa-2ue1
27
url VCID-nx86-xnct-afbs
vulnerability_id VCID-nx86-xnct-afbs
summary An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. Ansible Engine 2.7.18, 2.8.12, and 2.9.9 as well as previous versions are affected and Ansible Tower 3.4.5, 3.5.6 and 3.6.4 as well as previous versions are affected.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10744.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10744.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-10744
reference_id
reference_type
scores
0
value 0.00038
scoring_system epss
scoring_elements 0.11851
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-10744
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10744
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10744
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/advisories/GHSA-vp9j-rghq-8jhh
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
3
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-vp9j-rghq-8jhh
5
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
6
reference_url https://github.com/ansible/ansible/commit/77d0effcc5b2da1ef23e4ba32986a9759c27c10d
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/77d0effcc5b2da1ef23e4ba32986a9759c27c10d
7
reference_url https://github.com/ansible/ansible/commit/84afa8e90cd168ff13208c8eae3e533ce7e21e1f
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/84afa8e90cd168ff13208c8eae3e533ce7e21e1f
8
reference_url https://github.com/ansible/ansible/commit/ffd3757fc35468a97791e452e7f2d14c3e3fcb80
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/ffd3757fc35468a97791e452e7f2d14c3e3fcb80
9
reference_url https://github.com/ansible/ansible/issues/69782
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/69782
10
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-208.yaml
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-208.yaml
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1835566
reference_id 1835566
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1835566
12
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966660
reference_id 966660
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966660
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-10744
reference_id CVE-2020-10744
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
1
value 2.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-10744
14
reference_url https://usn.ubuntu.com/USN-5315-1/
reference_id USN-USN-5315-1
reference_type
scores
url https://usn.ubuntu.com/USN-5315-1/
fixed_packages
0
url pkg:pypi/ansible@2.8.0a1
purl pkg:pypi/ansible@2.8.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-7d8z-g99x-7qh2
11
vulnerability VCID-95kg-bk3s-g7gx
12
vulnerability VCID-98zq-xddz-dyc8
13
vulnerability VCID-aq21-sp74-17gk
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-brft-snn6-guc8
18
vulnerability VCID-bvsa-kz7r-zyea
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-mk3k-n9wn-q3ct
27
vulnerability VCID-n2b8-e8fa-2ue1
28
vulnerability VCID-nx86-xnct-afbs
29
vulnerability VCID-qtt6-8kf8-1fbt
30
vulnerability VCID-rarq-tdjt-hff3
31
vulnerability VCID-rnub-zmb6-5yhw
32
vulnerability VCID-uvca-5e2n-pqew
33
vulnerability VCID-xn7b-vz2e-6qdh
34
vulnerability VCID-xpfd-zdry-euh5
35
vulnerability VCID-zcmk-4k97-kkd9
36
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1
1
url pkg:pypi/ansible@2.8.13
purl pkg:pypi/ansible@2.8.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-7d8z-g99x-7qh2
6
vulnerability VCID-95kg-bk3s-g7gx
7
vulnerability VCID-98zq-xddz-dyc8
8
vulnerability VCID-b8cv-v25q-1kh3
9
vulnerability VCID-d8by-xxm3-xkhb
10
vulnerability VCID-enwa-2cfn-5uab
11
vulnerability VCID-hyr1-b223-bkef
12
vulnerability VCID-j4px-r23h-9kb7
13
vulnerability VCID-kgjy-7kdy-c3cg
14
vulnerability VCID-m87b-eb5y-8ydf
15
vulnerability VCID-nx86-xnct-afbs
16
vulnerability VCID-qtt6-8kf8-1fbt
17
vulnerability VCID-tfhg-gzz2-7qc5
18
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.13
2
url pkg:pypi/ansible@2.9.10
purl pkg:pypi/ansible@2.9.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-7d8z-g99x-7qh2
7
vulnerability VCID-98zq-xddz-dyc8
8
vulnerability VCID-b8cv-v25q-1kh3
9
vulnerability VCID-d8by-xxm3-xkhb
10
vulnerability VCID-enwa-2cfn-5uab
11
vulnerability VCID-hyr1-b223-bkef
12
vulnerability VCID-j4px-r23h-9kb7
13
vulnerability VCID-kgjy-7kdy-c3cg
14
vulnerability VCID-m87b-eb5y-8ydf
15
vulnerability VCID-nx86-xnct-afbs
16
vulnerability VCID-qtt6-8kf8-1fbt
17
vulnerability VCID-tfhg-gzz2-7qc5
18
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.10
3
url pkg:pypi/ansible@2.9.12
purl pkg:pypi/ansible@2.9.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-7d8z-g99x-7qh2
6
vulnerability VCID-98zq-xddz-dyc8
7
vulnerability VCID-b8cv-v25q-1kh3
8
vulnerability VCID-d8by-xxm3-xkhb
9
vulnerability VCID-enwa-2cfn-5uab
10
vulnerability VCID-hyr1-b223-bkef
11
vulnerability VCID-j4px-r23h-9kb7
12
vulnerability VCID-kgjy-7kdy-c3cg
13
vulnerability VCID-m87b-eb5y-8ydf
14
vulnerability VCID-qtt6-8kf8-1fbt
15
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.12
4
url pkg:pypi/ansible@2.10.0rc1
purl pkg:pypi/ansible@2.10.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-5r2p-dxtk-pkas
2
vulnerability VCID-98zq-xddz-dyc8
3
vulnerability VCID-b8cv-v25q-1kh3
4
vulnerability VCID-d8by-xxm3-xkhb
5
vulnerability VCID-hyr1-b223-bkef
6
vulnerability VCID-kgjy-7kdy-c3cg
7
vulnerability VCID-m87b-eb5y-8ydf
8
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.0rc1
aliases CVE-2020-10744, GHSA-vp9j-rghq-8jhh, PYSEC-2020-208
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nx86-xnct-afbs
28
url VCID-p6cz-c9ah-c7cp
vulnerability_id VCID-p6cz-c9ah-c7cp
summary A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.
references
0
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1776944
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1776944
1
reference_url https://github.com/ansible/ansible/pull/65686
reference_id
reference_type
scores
url https://github.com/ansible/ansible/pull/65686
2
reference_url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
fixed_packages
0
url pkg:pypi/ansible@2.7.15
purl pkg:pypi/ansible@2.7.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-aq21-sp74-17gk
12
vulnerability VCID-b423-t4kx-eqbq
13
vulnerability VCID-b8cv-v25q-1kh3
14
vulnerability VCID-brft-snn6-guc8
15
vulnerability VCID-bvsa-kz7r-zyea
16
vulnerability VCID-d8by-xxm3-xkhb
17
vulnerability VCID-enwa-2cfn-5uab
18
vulnerability VCID-gnq4-v5a7-m3ew
19
vulnerability VCID-hyr1-b223-bkef
20
vulnerability VCID-j4px-r23h-9kb7
21
vulnerability VCID-kgjy-7kdy-c3cg
22
vulnerability VCID-m87b-eb5y-8ydf
23
vulnerability VCID-n2b8-e8fa-2ue1
24
vulnerability VCID-nx86-xnct-afbs
25
vulnerability VCID-qtt6-8kf8-1fbt
26
vulnerability VCID-rarq-tdjt-hff3
27
vulnerability VCID-rnub-zmb6-5yhw
28
vulnerability VCID-uvca-5e2n-pqew
29
vulnerability VCID-xpfd-zdry-euh5
30
vulnerability VCID-zcmk-4k97-kkd9
31
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.15
1
url pkg:pypi/ansible@2.8.7
purl pkg:pypi/ansible@2.8.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-7d8z-g99x-7qh2
10
vulnerability VCID-95kg-bk3s-g7gx
11
vulnerability VCID-98zq-xddz-dyc8
12
vulnerability VCID-aq21-sp74-17gk
13
vulnerability VCID-b423-t4kx-eqbq
14
vulnerability VCID-b8cv-v25q-1kh3
15
vulnerability VCID-brft-snn6-guc8
16
vulnerability VCID-bvsa-kz7r-zyea
17
vulnerability VCID-d8by-xxm3-xkhb
18
vulnerability VCID-enwa-2cfn-5uab
19
vulnerability VCID-hyr1-b223-bkef
20
vulnerability VCID-j4px-r23h-9kb7
21
vulnerability VCID-kgjy-7kdy-c3cg
22
vulnerability VCID-m87b-eb5y-8ydf
23
vulnerability VCID-n2b8-e8fa-2ue1
24
vulnerability VCID-nx86-xnct-afbs
25
vulnerability VCID-qtt6-8kf8-1fbt
26
vulnerability VCID-rarq-tdjt-hff3
27
vulnerability VCID-rnub-zmb6-5yhw
28
vulnerability VCID-tfhg-gzz2-7qc5
29
vulnerability VCID-uvca-5e2n-pqew
30
vulnerability VCID-xpfd-zdry-euh5
31
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.7
2
url pkg:pypi/ansible@2.9.2
purl pkg:pypi/ansible@2.9.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6swz-79ue-bbef
9
vulnerability VCID-7d8z-g99x-7qh2
10
vulnerability VCID-95kg-bk3s-g7gx
11
vulnerability VCID-98zq-xddz-dyc8
12
vulnerability VCID-b423-t4kx-eqbq
13
vulnerability VCID-b8cv-v25q-1kh3
14
vulnerability VCID-brft-snn6-guc8
15
vulnerability VCID-bvsa-kz7r-zyea
16
vulnerability VCID-d8by-xxm3-xkhb
17
vulnerability VCID-enwa-2cfn-5uab
18
vulnerability VCID-hyr1-b223-bkef
19
vulnerability VCID-j4px-r23h-9kb7
20
vulnerability VCID-kgjy-7kdy-c3cg
21
vulnerability VCID-m87b-eb5y-8ydf
22
vulnerability VCID-n2b8-e8fa-2ue1
23
vulnerability VCID-nx86-xnct-afbs
24
vulnerability VCID-qtt6-8kf8-1fbt
25
vulnerability VCID-rarq-tdjt-hff3
26
vulnerability VCID-rnub-zmb6-5yhw
27
vulnerability VCID-tfhg-gzz2-7qc5
28
vulnerability VCID-uvca-5e2n-pqew
29
vulnerability VCID-xpfd-zdry-euh5
30
vulnerability VCID-ydka-2etb-hue9
31
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.2
aliases PYSEC-2020-180
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p6cz-c9ah-c7cp
29
url VCID-qbws-64b9-83fc
vulnerability_id VCID-qbws-64b9-83fc
summary In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.
references
0
reference_url https://access.redhat.com/errata/RHBA-2018:3788
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHBA-2018:3788
1
reference_url https://access.redhat.com/errata/RHSA-2018:2150
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:2150
2
reference_url https://access.redhat.com/errata/RHSA-2018:2151
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:2151
3
reference_url https://access.redhat.com/errata/RHSA-2018:2152
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:2152
4
reference_url https://access.redhat.com/errata/RHSA-2018:2166
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:2166
5
reference_url https://access.redhat.com/errata/RHSA-2018:2321
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:2321
6
reference_url https://access.redhat.com/errata/RHSA-2018:2585
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:2585
7
reference_url https://access.redhat.com/errata/RHSA-2019:0054
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:0054
8
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10874.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10874.json
9
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-10874
reference_id
reference_type
scores
0
value 0.0005
scoring_system epss
scoring_elements 0.16077
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-10874
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1596528
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1596528
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874
12
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
13
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
14
reference_url https://github.com/ansible/ansible/commit/10d6fe6c98cfee9a7be0fea6102ba5dec951aec7
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/10d6fe6c98cfee9a7be0fea6102ba5dec951aec7
15
reference_url https://github.com/ansible/ansible/commit/1f80949f964a946773f9d3ac1899535bd2cc2b8e
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/1f80949f964a946773f9d3ac1899535bd2cc2b8e
16
reference_url https://github.com/ansible/ansible/commit/44874addc7ea136f83c67d5869047ece02645fdb
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/44874addc7ea136f83c67d5869047ece02645fdb
17
reference_url https://github.com/ansible/ansible/pull/42067
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/42067
18
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-81.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-81.yaml
19
reference_url https://usn.ubuntu.com/4072-1
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4072-1
20
reference_url https://usn.ubuntu.com/4072-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4072-1/
21
reference_url https://web.archive.org/web/20201130165946/http://www.securitytracker.com/id/1041396
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20201130165946/http://www.securitytracker.com/id/1041396
22
reference_url http://www.securitytracker.com/id/1041396
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1041396
23
reference_url https://access.redhat.com/security/cve/CVE-2018-10874
reference_id CVE-2018-10874
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/cve/CVE-2018-10874
24
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-10874
reference_id CVE-2018-10874
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-10874
25
reference_url https://github.com/advisories/GHSA-3xvg-x47j-x75w
reference_id GHSA-3xvg-x47j-x75w
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3xvg-x47j-x75w
fixed_packages
0
url pkg:pypi/ansible@2.4.6.0
purl pkg:pypi/ansible@2.4.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-46yu-yqv4-1ugb
4
vulnerability VCID-49gh-wgmc-mfew
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-7f2g-zz9p-sufc
11
vulnerability VCID-826d-vdw1-dbaj
12
vulnerability VCID-95kg-bk3s-g7gx
13
vulnerability VCID-axds-bd49-fbdj
14
vulnerability VCID-b423-t4kx-eqbq
15
vulnerability VCID-b8cv-v25q-1kh3
16
vulnerability VCID-bmq3-uckn-tfhk
17
vulnerability VCID-brft-snn6-guc8
18
vulnerability VCID-d8by-xxm3-xkhb
19
vulnerability VCID-enwa-2cfn-5uab
20
vulnerability VCID-gnq4-v5a7-m3ew
21
vulnerability VCID-hyr1-b223-bkef
22
vulnerability VCID-j4px-r23h-9kb7
23
vulnerability VCID-kgjy-7kdy-c3cg
24
vulnerability VCID-kva6-sjfx-rbe3
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-n2b8-e8fa-2ue1
27
vulnerability VCID-nx86-xnct-afbs
28
vulnerability VCID-p6cz-c9ah-c7cp
29
vulnerability VCID-qtt6-8kf8-1fbt
30
vulnerability VCID-rarq-tdjt-hff3
31
vulnerability VCID-rnub-zmb6-5yhw
32
vulnerability VCID-uvca-5e2n-pqew
33
vulnerability VCID-xk7s-y611-mffc
34
vulnerability VCID-xn7b-vz2e-6qdh
35
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.6.0
1
url pkg:pypi/ansible@2.5.6
purl pkg:pypi/ansible@2.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-3v1a-j6eq-57dk
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-5mcc-gtrr-j3e4
7
vulnerability VCID-5r2p-dxtk-pkas
8
vulnerability VCID-6hdk-ywcn-4qe4
9
vulnerability VCID-6smx-ju23-8qes
10
vulnerability VCID-6swz-79ue-bbef
11
vulnerability VCID-7f2g-zz9p-sufc
12
vulnerability VCID-826d-vdw1-dbaj
13
vulnerability VCID-95kg-bk3s-g7gx
14
vulnerability VCID-98zq-xddz-dyc8
15
vulnerability VCID-axds-bd49-fbdj
16
vulnerability VCID-b423-t4kx-eqbq
17
vulnerability VCID-b8cv-v25q-1kh3
18
vulnerability VCID-bmq3-uckn-tfhk
19
vulnerability VCID-brft-snn6-guc8
20
vulnerability VCID-d8by-xxm3-xkhb
21
vulnerability VCID-enwa-2cfn-5uab
22
vulnerability VCID-gnq4-v5a7-m3ew
23
vulnerability VCID-hyr1-b223-bkef
24
vulnerability VCID-j4px-r23h-9kb7
25
vulnerability VCID-kgjy-7kdy-c3cg
26
vulnerability VCID-kva6-sjfx-rbe3
27
vulnerability VCID-m87b-eb5y-8ydf
28
vulnerability VCID-n2b8-e8fa-2ue1
29
vulnerability VCID-nx86-xnct-afbs
30
vulnerability VCID-p6cz-c9ah-c7cp
31
vulnerability VCID-qtt6-8kf8-1fbt
32
vulnerability VCID-rarq-tdjt-hff3
33
vulnerability VCID-rnub-zmb6-5yhw
34
vulnerability VCID-uvca-5e2n-pqew
35
vulnerability VCID-xk7s-y611-mffc
36
vulnerability VCID-xn7b-vz2e-6qdh
37
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.6
2
url pkg:pypi/ansible@2.6.1
purl pkg:pypi/ansible@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-3v1a-j6eq-57dk
4
vulnerability VCID-4331-d5yy-uybc
5
vulnerability VCID-46yu-yqv4-1ugb
6
vulnerability VCID-49gh-wgmc-mfew
7
vulnerability VCID-52zf-mjec-f3d5
8
vulnerability VCID-5mcc-gtrr-j3e4
9
vulnerability VCID-5r2p-dxtk-pkas
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-7f2g-zz9p-sufc
14
vulnerability VCID-826d-vdw1-dbaj
15
vulnerability VCID-95kg-bk3s-g7gx
16
vulnerability VCID-98zq-xddz-dyc8
17
vulnerability VCID-axds-bd49-fbdj
18
vulnerability VCID-b423-t4kx-eqbq
19
vulnerability VCID-b8cv-v25q-1kh3
20
vulnerability VCID-bmq3-uckn-tfhk
21
vulnerability VCID-brft-snn6-guc8
22
vulnerability VCID-d8by-xxm3-xkhb
23
vulnerability VCID-enwa-2cfn-5uab
24
vulnerability VCID-gnq4-v5a7-m3ew
25
vulnerability VCID-hyr1-b223-bkef
26
vulnerability VCID-j4px-r23h-9kb7
27
vulnerability VCID-kgjy-7kdy-c3cg
28
vulnerability VCID-m87b-eb5y-8ydf
29
vulnerability VCID-n2b8-e8fa-2ue1
30
vulnerability VCID-nx86-xnct-afbs
31
vulnerability VCID-p6cz-c9ah-c7cp
32
vulnerability VCID-qtt6-8kf8-1fbt
33
vulnerability VCID-rarq-tdjt-hff3
34
vulnerability VCID-rnub-zmb6-5yhw
35
vulnerability VCID-uvca-5e2n-pqew
36
vulnerability VCID-xk7s-y611-mffc
37
vulnerability VCID-xn7b-vz2e-6qdh
38
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.1
aliases CVE-2018-10874, GHSA-3xvg-x47j-x75w, PYSEC-2018-81
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qbws-64b9-83fc
30
url VCID-qtt6-8kf8-1fbt
vulnerability_id VCID-qtt6-8kf8-1fbt
summary information disclosure
references
0
reference_url https://access.redhat.com/errata/RHSA-2021:3871
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2021:3871
1
reference_url https://access.redhat.com/errata/RHSA-2021:3872
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2021:3872
2
reference_url https://access.redhat.com/errata/RHSA-2021:3874
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2021:3874
3
reference_url https://access.redhat.com/errata/RHSA-2021:4703
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2021:4703
4
reference_url https://access.redhat.com/errata/RHSA-2021:4750
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2021:4750
5
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3620.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3620.json
6
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-3620
reference_id
reference_type
scores
0
value 0.0029
scoring_system epss
scoring_elements 0.52692
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-3620
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1975767
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:25Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=1975767
8
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
9
reference_url https://github.com/advisories/GHSA-4r65-35qq-ch8j
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-4r65-35qq-ch8j
10
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
11
reference_url https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:25Z/
url https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes
12
reference_url https://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:25Z/
url https://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0
13
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2022-164.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2022-164.yaml
14
reference_url https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:09:25Z/
url https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
15
reference_url https://security.archlinux.org/AVG-1941
reference_id AVG-1941
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1941
16
reference_url https://access.redhat.com/security/cve/CVE-2021-3620
reference_id CVE-2021-3620
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/cve/CVE-2021-3620
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-3620
reference_id CVE-2021-3620
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-3620
18
reference_url https://usn.ubuntu.com/USN-5315-1/
reference_id USN-USN-5315-1
reference_type
scores
url https://usn.ubuntu.com/USN-5315-1/
fixed_packages
0
url pkg:pypi/ansible@2.9.27
purl pkg:pypi/ansible@2.9.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-5r2p-dxtk-pkas
2
vulnerability VCID-98zq-xddz-dyc8
3
vulnerability VCID-b8cv-v25q-1kh3
4
vulnerability VCID-d8by-xxm3-xkhb
5
vulnerability VCID-hyr1-b223-bkef
6
vulnerability VCID-kgjy-7kdy-c3cg
7
vulnerability VCID-m87b-eb5y-8ydf
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.27
aliases CVE-2021-3620, GHSA-4r65-35qq-ch8j, PYSEC-2022-164
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qtt6-8kf8-1fbt
31
url VCID-rarq-tdjt-hff3
vulnerability_id VCID-rarq-tdjt-hff3
summary A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1738.json
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1738.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1738
reference_id
reference_type
scores
0
value 0.00215
scoring_system epss
scoring_elements 0.44079
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1738
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1738
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1738
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/advisories/GHSA-f85h-23mf-2fwh
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L
3
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-f85h-23mf-2fwh
5
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
6
reference_url https://github.com/ansible/ansible/issues/67796
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/67796
7
reference_url https://github.com/ansible/ansible/pull/67808
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/67808
8
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-10.yaml
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-10.yaml
9
reference_url https://security.gentoo.org/glsa/202006-11
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202006-11
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1802164
reference_id 1802164
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1802164
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1738
reference_id CVE-2020-1738
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1738
fixed_packages
0
url pkg:pypi/ansible@2.7.17
purl pkg:pypi/ansible@2.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6hdk-ywcn-4qe4
6
vulnerability VCID-6swz-79ue-bbef
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-gnq4-v5a7-m3ew
13
vulnerability VCID-hyr1-b223-bkef
14
vulnerability VCID-j4px-r23h-9kb7
15
vulnerability VCID-kgjy-7kdy-c3cg
16
vulnerability VCID-m87b-eb5y-8ydf
17
vulnerability VCID-nx86-xnct-afbs
18
vulnerability VCID-qtt6-8kf8-1fbt
19
vulnerability VCID-uvca-5e2n-pqew
20
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17
1
url pkg:pypi/ansible@2.8.0a1
purl pkg:pypi/ansible@2.8.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-7d8z-g99x-7qh2
11
vulnerability VCID-95kg-bk3s-g7gx
12
vulnerability VCID-98zq-xddz-dyc8
13
vulnerability VCID-aq21-sp74-17gk
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-brft-snn6-guc8
18
vulnerability VCID-bvsa-kz7r-zyea
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-mk3k-n9wn-q3ct
27
vulnerability VCID-n2b8-e8fa-2ue1
28
vulnerability VCID-nx86-xnct-afbs
29
vulnerability VCID-qtt6-8kf8-1fbt
30
vulnerability VCID-rarq-tdjt-hff3
31
vulnerability VCID-rnub-zmb6-5yhw
32
vulnerability VCID-uvca-5e2n-pqew
33
vulnerability VCID-xn7b-vz2e-6qdh
34
vulnerability VCID-xpfd-zdry-euh5
35
vulnerability VCID-zcmk-4k97-kkd9
36
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1
2
url pkg:pypi/ansible@2.8.9
purl pkg:pypi/ansible@2.8.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-b8cv-v25q-1kh3
12
vulnerability VCID-bvsa-kz7r-zyea
13
vulnerability VCID-d8by-xxm3-xkhb
14
vulnerability VCID-enwa-2cfn-5uab
15
vulnerability VCID-hyr1-b223-bkef
16
vulnerability VCID-j4px-r23h-9kb7
17
vulnerability VCID-kgjy-7kdy-c3cg
18
vulnerability VCID-m87b-eb5y-8ydf
19
vulnerability VCID-nx86-xnct-afbs
20
vulnerability VCID-qtt6-8kf8-1fbt
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9
3
url pkg:pypi/ansible@2.9.6
purl pkg:pypi/ansible@2.9.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-b8cv-v25q-1kh3
11
vulnerability VCID-bvsa-kz7r-zyea
12
vulnerability VCID-d8by-xxm3-xkhb
13
vulnerability VCID-enwa-2cfn-5uab
14
vulnerability VCID-hyr1-b223-bkef
15
vulnerability VCID-j4px-r23h-9kb7
16
vulnerability VCID-kgjy-7kdy-c3cg
17
vulnerability VCID-m87b-eb5y-8ydf
18
vulnerability VCID-nx86-xnct-afbs
19
vulnerability VCID-qtt6-8kf8-1fbt
20
vulnerability VCID-rarq-tdjt-hff3
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-ydka-2etb-hue9
25
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6
aliases CVE-2020-1738, GHSA-f85h-23mf-2fwh, PYSEC-2020-10
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rarq-tdjt-hff3
32
url VCID-rnub-zmb6-5yhw
vulnerability_id VCID-rnub-zmb6-5yhw
summary A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1739.json
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1739.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-1739
reference_id
reference_type
scores
0
value 0.00046
scoring_system epss
scoring_elements 0.1474
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-1739
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
21
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
22
reference_url https://github.com/advisories/GHSA-923p-fr2c-g5m2
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
3
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-923p-fr2c-g5m2
23
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
24
reference_url https://github.com/ansible/ansible/commit/1a89d4f059c21a818306a39ada7f5284ae125237
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/1a89d4f059c21a818306a39ada7f5284ae125237
25
reference_url https://github.com/ansible/ansible/commit/6c74a298702c8bb5532b9600073312e08f39680f
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/6c74a298702c8bb5532b9600073312e08f39680f
26
reference_url https://github.com/ansible/ansible/commit/c6c4fbf4a1fdea1e10ba94462a60c413990a16a4
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/c6c4fbf4a1fdea1e10ba94462a60c413990a16a4
27
reference_url https://github.com/ansible/ansible/issues/67797
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/67797
28
reference_url https://github.com/ansible/ansible/pull/68911
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/68911
29
reference_url https://github.com/ansible/ansible/pull/68912
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/68912
30
reference_url https://github.com/ansible/ansible/pull/68913
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/68913
31
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-11.yaml
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-11.yaml
32
reference_url https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html
33
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3
34
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3/
35
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7
36
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7/
37
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2
38
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2/
39
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-1739
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-1739
40
reference_url https://www.debian.org/security/2021/dsa-4950
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value 2.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4950
41
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1802178
reference_id 1802178
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1802178
42
reference_url https://access.redhat.com/errata/RHSA-2020:1541
reference_id RHSA-2020:1541
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1541
43
reference_url https://access.redhat.com/errata/RHSA-2020:1542
reference_id RHSA-2020:1542
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1542
44
reference_url https://access.redhat.com/errata/RHSA-2020:1543
reference_id RHSA-2020:1543
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1543
45
reference_url https://access.redhat.com/errata/RHSA-2020:1544
reference_id RHSA-2020:1544
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1544
46
reference_url https://usn.ubuntu.com/7330-1/
reference_id USN-7330-1
reference_type
scores
url https://usn.ubuntu.com/7330-1/
fixed_packages
0
url pkg:pypi/ansible@2.7.17
purl pkg:pypi/ansible@2.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6hdk-ywcn-4qe4
6
vulnerability VCID-6swz-79ue-bbef
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-gnq4-v5a7-m3ew
13
vulnerability VCID-hyr1-b223-bkef
14
vulnerability VCID-j4px-r23h-9kb7
15
vulnerability VCID-kgjy-7kdy-c3cg
16
vulnerability VCID-m87b-eb5y-8ydf
17
vulnerability VCID-nx86-xnct-afbs
18
vulnerability VCID-qtt6-8kf8-1fbt
19
vulnerability VCID-uvca-5e2n-pqew
20
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.17
1
url pkg:pypi/ansible@2.8.0a1
purl pkg:pypi/ansible@2.8.0a1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-4tfv-snmv-bbax
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-7d8z-g99x-7qh2
11
vulnerability VCID-95kg-bk3s-g7gx
12
vulnerability VCID-98zq-xddz-dyc8
13
vulnerability VCID-aq21-sp74-17gk
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-brft-snn6-guc8
18
vulnerability VCID-bvsa-kz7r-zyea
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-mk3k-n9wn-q3ct
27
vulnerability VCID-n2b8-e8fa-2ue1
28
vulnerability VCID-nx86-xnct-afbs
29
vulnerability VCID-qtt6-8kf8-1fbt
30
vulnerability VCID-rarq-tdjt-hff3
31
vulnerability VCID-rnub-zmb6-5yhw
32
vulnerability VCID-uvca-5e2n-pqew
33
vulnerability VCID-xn7b-vz2e-6qdh
34
vulnerability VCID-xpfd-zdry-euh5
35
vulnerability VCID-zcmk-4k97-kkd9
36
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.0a1
2
url pkg:pypi/ansible@2.8.9
purl pkg:pypi/ansible@2.8.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-95kg-bk3s-g7gx
10
vulnerability VCID-98zq-xddz-dyc8
11
vulnerability VCID-b8cv-v25q-1kh3
12
vulnerability VCID-bvsa-kz7r-zyea
13
vulnerability VCID-d8by-xxm3-xkhb
14
vulnerability VCID-enwa-2cfn-5uab
15
vulnerability VCID-hyr1-b223-bkef
16
vulnerability VCID-j4px-r23h-9kb7
17
vulnerability VCID-kgjy-7kdy-c3cg
18
vulnerability VCID-m87b-eb5y-8ydf
19
vulnerability VCID-nx86-xnct-afbs
20
vulnerability VCID-qtt6-8kf8-1fbt
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.9
3
url pkg:pypi/ansible@2.8.11
purl pkg:pypi/ansible@2.8.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-7d8z-g99x-7qh2
7
vulnerability VCID-95kg-bk3s-g7gx
8
vulnerability VCID-98zq-xddz-dyc8
9
vulnerability VCID-b8cv-v25q-1kh3
10
vulnerability VCID-d8by-xxm3-xkhb
11
vulnerability VCID-enwa-2cfn-5uab
12
vulnerability VCID-hyr1-b223-bkef
13
vulnerability VCID-j4px-r23h-9kb7
14
vulnerability VCID-kgjy-7kdy-c3cg
15
vulnerability VCID-m87b-eb5y-8ydf
16
vulnerability VCID-nx86-xnct-afbs
17
vulnerability VCID-qtt6-8kf8-1fbt
18
vulnerability VCID-tfhg-gzz2-7qc5
19
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.11
4
url pkg:pypi/ansible@2.9.6
purl pkg:pypi/ansible@2.9.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-49gh-wgmc-mfew
4
vulnerability VCID-5mcc-gtrr-j3e4
5
vulnerability VCID-5r2p-dxtk-pkas
6
vulnerability VCID-6hdk-ywcn-4qe4
7
vulnerability VCID-6swz-79ue-bbef
8
vulnerability VCID-7d8z-g99x-7qh2
9
vulnerability VCID-98zq-xddz-dyc8
10
vulnerability VCID-b8cv-v25q-1kh3
11
vulnerability VCID-bvsa-kz7r-zyea
12
vulnerability VCID-d8by-xxm3-xkhb
13
vulnerability VCID-enwa-2cfn-5uab
14
vulnerability VCID-hyr1-b223-bkef
15
vulnerability VCID-j4px-r23h-9kb7
16
vulnerability VCID-kgjy-7kdy-c3cg
17
vulnerability VCID-m87b-eb5y-8ydf
18
vulnerability VCID-nx86-xnct-afbs
19
vulnerability VCID-qtt6-8kf8-1fbt
20
vulnerability VCID-rarq-tdjt-hff3
21
vulnerability VCID-tfhg-gzz2-7qc5
22
vulnerability VCID-uvca-5e2n-pqew
23
vulnerability VCID-xpfd-zdry-euh5
24
vulnerability VCID-ydka-2etb-hue9
25
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.6
5
url pkg:pypi/ansible@2.9.7
purl pkg:pypi/ansible@2.9.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-6swz-79ue-bbef
6
vulnerability VCID-7d8z-g99x-7qh2
7
vulnerability VCID-98zq-xddz-dyc8
8
vulnerability VCID-b8cv-v25q-1kh3
9
vulnerability VCID-d8by-xxm3-xkhb
10
vulnerability VCID-enwa-2cfn-5uab
11
vulnerability VCID-hyr1-b223-bkef
12
vulnerability VCID-j4px-r23h-9kb7
13
vulnerability VCID-kgjy-7kdy-c3cg
14
vulnerability VCID-m87b-eb5y-8ydf
15
vulnerability VCID-nx86-xnct-afbs
16
vulnerability VCID-qtt6-8kf8-1fbt
17
vulnerability VCID-tfhg-gzz2-7qc5
18
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.7
aliases CVE-2020-1739, GHSA-923p-fr2c-g5m2, PYSEC-2020-11
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rnub-zmb6-5yhw
33
url VCID-s2w1-fedq-ckes
vulnerability_id VCID-s2w1-fedq-ckes
summary Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.
references
0
reference_url https://access.redhat.com/errata/RHSA-2017:1244
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1244
1
reference_url https://access.redhat.com/errata/RHSA-2017:1334
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1334
2
reference_url https://access.redhat.com/errata/RHSA-2017:1476
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1476
3
reference_url https://access.redhat.com/errata/RHSA-2017:1499
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1499
4
reference_url https://access.redhat.com/errata/RHSA-2017:1599
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1599
5
reference_url https://access.redhat.com/errata/RHSA-2017:1685
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1685
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7466.json
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7466.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7466
reference_id
reference_type
scores
0
value 0.02659
scoring_system epss
scoring_elements 0.86041
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7466
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7466
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7466
9
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
10
reference_url https://github.com/ansible/ansible/commit/0d418789a298561fded9bce977d34babc9097079
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/0d418789a298561fded9bce977d34babc9097079
11
reference_url https://github.com/ansible/ansible/commit/7ff9fa52cfcef2065f0db80d85dd94b9b754839c
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/7ff9fa52cfcef2065f0db80d85dd94b9b754839c
12
reference_url https://github.com/ansible/ansible/issues/24186
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/24186
13
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-40.yaml
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-40.yaml
14
reference_url https://web.archive.org/web/20170701161323/http://www.securityfocus.com/bid/97595
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20170701161323/http://www.securityfocus.com/bid/97595
15
reference_url http://www.securityfocus.com/bid/97595
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/97595
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1439212
reference_id 1439212
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1439212
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-7466
reference_id CVE-2017-7466
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-7466
18
reference_url https://github.com/advisories/GHSA-3m8p-xpm6-8ww3
reference_id GHSA-3m8p-xpm6-8ww3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3m8p-xpm6-8ww3
fixed_packages
0
url pkg:pypi/ansible@2.3.0.0
purl pkg:pypi/ansible@2.3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-46yu-yqv4-1ugb
4
vulnerability VCID-49gh-wgmc-mfew
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-664v-ms96-jfd2
8
vulnerability VCID-6hdk-ywcn-4qe4
9
vulnerability VCID-6smx-ju23-8qes
10
vulnerability VCID-6swz-79ue-bbef
11
vulnerability VCID-7f2g-zz9p-sufc
12
vulnerability VCID-826d-vdw1-dbaj
13
vulnerability VCID-95kg-bk3s-g7gx
14
vulnerability VCID-a79h-gfcm-13cq
15
vulnerability VCID-axds-bd49-fbdj
16
vulnerability VCID-b423-t4kx-eqbq
17
vulnerability VCID-b8cv-v25q-1kh3
18
vulnerability VCID-bmq3-uckn-tfhk
19
vulnerability VCID-brft-snn6-guc8
20
vulnerability VCID-d8by-xxm3-xkhb
21
vulnerability VCID-enwa-2cfn-5uab
22
vulnerability VCID-gnq4-v5a7-m3ew
23
vulnerability VCID-hyr1-b223-bkef
24
vulnerability VCID-j4px-r23h-9kb7
25
vulnerability VCID-kgjy-7kdy-c3cg
26
vulnerability VCID-m87b-eb5y-8ydf
27
vulnerability VCID-n2b8-e8fa-2ue1
28
vulnerability VCID-nx86-xnct-afbs
29
vulnerability VCID-p6cz-c9ah-c7cp
30
vulnerability VCID-qbws-64b9-83fc
31
vulnerability VCID-qtt6-8kf8-1fbt
32
vulnerability VCID-rarq-tdjt-hff3
33
vulnerability VCID-rnub-zmb6-5yhw
34
vulnerability VCID-uvca-5e2n-pqew
35
vulnerability VCID-xk7s-y611-mffc
36
vulnerability VCID-xn7b-vz2e-6qdh
37
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.3.0.0
aliases CVE-2017-7466, GHSA-3m8p-xpm6-8ww3, PYSEC-2018-40
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s2w1-fedq-ckes
34
url VCID-uvca-5e2n-pqew
vulnerability_id VCID-uvca-5e2n-pqew
summary information disclosure
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20191.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20191.json
1
reference_url https://access.redhat.com/security/cve/cve-2021-20191
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/cve/cve-2021-20191
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-20191
reference_id
reference_type
scores
0
value 0.00024
scoring_system epss
scoring_elements 0.07158
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-20191
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1916813
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1916813
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://github.com/advisories/GHSA-8f4m-hccc-8qph
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-8f4m-hccc-8qph
6
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
7
reference_url https://github.com/ansible/ansible/commit/cc82d986c40328d4ae81298a9d287c95a6326bb0
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/cc82d986c40328d4ae81298a9d287c95a6326bb0
8
reference_url https://github.com/ansible/ansible/commit/d74a1b1d1325af2a24848044cf2858987f5a3ecc
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/d74a1b1d1325af2a24848044cf2858987f5a3ecc
9
reference_url https://github.com/ansible/ansible/pull/73488
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/73488
10
reference_url https://github.com/ansible/ansible/pull/73489
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/73489
11
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-124.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2021-124.yaml
12
reference_url https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-20191
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-20191
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753
reference_id 985753
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985753
15
reference_url https://security.archlinux.org/ASA-202102-9
reference_id ASA-202102-9
reference_type
scores
url https://security.archlinux.org/ASA-202102-9
16
reference_url https://security.archlinux.org/AVG-1437
reference_id AVG-1437
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1437
17
reference_url https://access.redhat.com/errata/RHSA-2021:0663
reference_id RHSA-2021:0663
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0663
18
reference_url https://access.redhat.com/errata/RHSA-2021:0664
reference_id RHSA-2021:0664
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:0664
19
reference_url https://access.redhat.com/errata/RHSA-2021:1079
reference_id RHSA-2021:1079
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:1079
20
reference_url https://access.redhat.com/errata/RHSA-2021:2180
reference_id RHSA-2021:2180
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2180
fixed_packages
0
url pkg:pypi/ansible@2.8.19rc1
purl pkg:pypi/ansible@2.8.19rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-95kg-bk3s-g7gx
6
vulnerability VCID-98zq-xddz-dyc8
7
vulnerability VCID-b8cv-v25q-1kh3
8
vulnerability VCID-d8by-xxm3-xkhb
9
vulnerability VCID-enwa-2cfn-5uab
10
vulnerability VCID-hyr1-b223-bkef
11
vulnerability VCID-j4px-r23h-9kb7
12
vulnerability VCID-kgjy-7kdy-c3cg
13
vulnerability VCID-m87b-eb5y-8ydf
14
vulnerability VCID-nx86-xnct-afbs
15
vulnerability VCID-qtt6-8kf8-1fbt
16
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.19rc1
1
url pkg:pypi/ansible@2.8.19
purl pkg:pypi/ansible@2.8.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-95kg-bk3s-g7gx
6
vulnerability VCID-98zq-xddz-dyc8
7
vulnerability VCID-b8cv-v25q-1kh3
8
vulnerability VCID-d8by-xxm3-xkhb
9
vulnerability VCID-enwa-2cfn-5uab
10
vulnerability VCID-hyr1-b223-bkef
11
vulnerability VCID-j4px-r23h-9kb7
12
vulnerability VCID-kgjy-7kdy-c3cg
13
vulnerability VCID-m87b-eb5y-8ydf
14
vulnerability VCID-nx86-xnct-afbs
15
vulnerability VCID-qtt6-8kf8-1fbt
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.19
2
url pkg:pypi/ansible@2.9.18rc1
purl pkg:pypi/ansible@2.9.18rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-49gh-wgmc-mfew
3
vulnerability VCID-5mcc-gtrr-j3e4
4
vulnerability VCID-5r2p-dxtk-pkas
5
vulnerability VCID-98zq-xddz-dyc8
6
vulnerability VCID-b8cv-v25q-1kh3
7
vulnerability VCID-d8by-xxm3-xkhb
8
vulnerability VCID-enwa-2cfn-5uab
9
vulnerability VCID-hyr1-b223-bkef
10
vulnerability VCID-j4px-r23h-9kb7
11
vulnerability VCID-kgjy-7kdy-c3cg
12
vulnerability VCID-m87b-eb5y-8ydf
13
vulnerability VCID-qtt6-8kf8-1fbt
14
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18rc1
3
url pkg:pypi/ansible@2.9.18
purl pkg:pypi/ansible@2.9.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-5r2p-dxtk-pkas
3
vulnerability VCID-98zq-xddz-dyc8
4
vulnerability VCID-b8cv-v25q-1kh3
5
vulnerability VCID-d8by-xxm3-xkhb
6
vulnerability VCID-enwa-2cfn-5uab
7
vulnerability VCID-hyr1-b223-bkef
8
vulnerability VCID-kgjy-7kdy-c3cg
9
vulnerability VCID-m87b-eb5y-8ydf
10
vulnerability VCID-qtt6-8kf8-1fbt
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.9.18
4
url pkg:pypi/ansible@2.10.7
purl pkg:pypi/ansible@2.10.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-5r2p-dxtk-pkas
2
vulnerability VCID-d8by-xxm3-xkhb
3
vulnerability VCID-kgjy-7kdy-c3cg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.10.7
aliases CVE-2021-20191, GHSA-8f4m-hccc-8qph, PYSEC-2021-124
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uvca-5e2n-pqew
35
url VCID-xk7s-y611-mffc
vulnerability_id VCID-xk7s-y611-mffc
summary A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.
references
0
reference_url https://access.redhat.com/errata/RHSA-2019:3744
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:3744
1
reference_url https://access.redhat.com/errata/RHSA-2019:3789
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:3789
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156
3
reference_url https://github.com/ansible/ansible/pull/57188
reference_id
reference_type
scores
url https://github.com/ansible/ansible/pull/57188
4
reference_url https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html
5
reference_url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
fixed_packages
0
url pkg:pypi/ansible@2.6.18
purl pkg:pypi/ansible@2.6.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-52zf-mjec-f3d5
7
vulnerability VCID-5mcc-gtrr-j3e4
8
vulnerability VCID-5r2p-dxtk-pkas
9
vulnerability VCID-6hdk-ywcn-4qe4
10
vulnerability VCID-6smx-ju23-8qes
11
vulnerability VCID-6swz-79ue-bbef
12
vulnerability VCID-95kg-bk3s-g7gx
13
vulnerability VCID-98zq-xddz-dyc8
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-brft-snn6-guc8
18
vulnerability VCID-d8by-xxm3-xkhb
19
vulnerability VCID-enwa-2cfn-5uab
20
vulnerability VCID-gnq4-v5a7-m3ew
21
vulnerability VCID-hyr1-b223-bkef
22
vulnerability VCID-j4px-r23h-9kb7
23
vulnerability VCID-kgjy-7kdy-c3cg
24
vulnerability VCID-m87b-eb5y-8ydf
25
vulnerability VCID-n2b8-e8fa-2ue1
26
vulnerability VCID-nx86-xnct-afbs
27
vulnerability VCID-p6cz-c9ah-c7cp
28
vulnerability VCID-qtt6-8kf8-1fbt
29
vulnerability VCID-rarq-tdjt-hff3
30
vulnerability VCID-rnub-zmb6-5yhw
31
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.18
1
url pkg:pypi/ansible@2.7.12
purl pkg:pypi/ansible@2.7.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-4tfv-snmv-bbax
7
vulnerability VCID-52zf-mjec-f3d5
8
vulnerability VCID-5mcc-gtrr-j3e4
9
vulnerability VCID-5r2p-dxtk-pkas
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-95kg-bk3s-g7gx
14
vulnerability VCID-98zq-xddz-dyc8
15
vulnerability VCID-aq21-sp74-17gk
16
vulnerability VCID-axds-bd49-fbdj
17
vulnerability VCID-b423-t4kx-eqbq
18
vulnerability VCID-b8cv-v25q-1kh3
19
vulnerability VCID-brft-snn6-guc8
20
vulnerability VCID-bvsa-kz7r-zyea
21
vulnerability VCID-d8by-xxm3-xkhb
22
vulnerability VCID-enwa-2cfn-5uab
23
vulnerability VCID-gnq4-v5a7-m3ew
24
vulnerability VCID-hyr1-b223-bkef
25
vulnerability VCID-j4px-r23h-9kb7
26
vulnerability VCID-kgjy-7kdy-c3cg
27
vulnerability VCID-m87b-eb5y-8ydf
28
vulnerability VCID-n2b8-e8fa-2ue1
29
vulnerability VCID-nx86-xnct-afbs
30
vulnerability VCID-p6cz-c9ah-c7cp
31
vulnerability VCID-qtt6-8kf8-1fbt
32
vulnerability VCID-rarq-tdjt-hff3
33
vulnerability VCID-rnub-zmb6-5yhw
34
vulnerability VCID-uvca-5e2n-pqew
35
vulnerability VCID-vctt-ev3n-zkf8
36
vulnerability VCID-xpfd-zdry-euh5
37
vulnerability VCID-zcmk-4k97-kkd9
38
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.12
2
url pkg:pypi/ansible@2.8.2
purl pkg:pypi/ansible@2.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-4tfv-snmv-bbax
7
vulnerability VCID-52zf-mjec-f3d5
8
vulnerability VCID-5mcc-gtrr-j3e4
9
vulnerability VCID-5r2p-dxtk-pkas
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-7d8z-g99x-7qh2
14
vulnerability VCID-95kg-bk3s-g7gx
15
vulnerability VCID-98zq-xddz-dyc8
16
vulnerability VCID-aq21-sp74-17gk
17
vulnerability VCID-axds-bd49-fbdj
18
vulnerability VCID-b423-t4kx-eqbq
19
vulnerability VCID-b8cv-v25q-1kh3
20
vulnerability VCID-brft-snn6-guc8
21
vulnerability VCID-bvsa-kz7r-zyea
22
vulnerability VCID-d8by-xxm3-xkhb
23
vulnerability VCID-enwa-2cfn-5uab
24
vulnerability VCID-gnq4-v5a7-m3ew
25
vulnerability VCID-hyr1-b223-bkef
26
vulnerability VCID-j4px-r23h-9kb7
27
vulnerability VCID-kgjy-7kdy-c3cg
28
vulnerability VCID-m87b-eb5y-8ydf
29
vulnerability VCID-mk3k-n9wn-q3ct
30
vulnerability VCID-n2b8-e8fa-2ue1
31
vulnerability VCID-nx86-xnct-afbs
32
vulnerability VCID-p6cz-c9ah-c7cp
33
vulnerability VCID-qtt6-8kf8-1fbt
34
vulnerability VCID-rarq-tdjt-hff3
35
vulnerability VCID-rnub-zmb6-5yhw
36
vulnerability VCID-sdv2-h8d8-9ydj
37
vulnerability VCID-tfhg-gzz2-7qc5
38
vulnerability VCID-uvca-5e2n-pqew
39
vulnerability VCID-vctt-ev3n-zkf8
40
vulnerability VCID-xpfd-zdry-euh5
41
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.2
aliases PYSEC-2019-72
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xk7s-y611-mffc
36
url VCID-xn7b-vz2e-6qdh
vulnerability_id VCID-xn7b-vz2e-6qdh
summary A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.
references
0
reference_url https://access.redhat.com/errata/RHSA-2019:3744
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3744
1
reference_url https://access.redhat.com/errata/RHSA-2019:3789
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:3789
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10156.json
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10156.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10156
reference_id
reference_type
scores
0
value 0.00589
scoring_system epss
scoring_elements 0.69494
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10156
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10156
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10206
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14846
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14864
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14904
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10684
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10685
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10729
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14330
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14332
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14365
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1733
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1735
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1739
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1740
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1746
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1753
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20228
23
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
24
reference_url https://github.com/advisories/GHSA-grgm-pph5-j5h7
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-grgm-pph5-j5h7
25
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
26
reference_url https://github.com/ansible/ansible/commit/04e94274fb92e116e9082cc9b86b1fd05c836922
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/04e94274fb92e116e9082cc9b86b1fd05c836922
27
reference_url https://github.com/ansible/ansible/commit/3ff6505e8ff0e4655bab008886983476ef903375
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/3ff6505e8ff0e4655bab008886983476ef903375
28
reference_url https://github.com/ansible/ansible/commit/a11c3edfa41e7e4a4db323cdabfc2eae1b61da2a
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/a11c3edfa41e7e4a4db323cdabfc2eae1b61da2a
29
reference_url https://github.com/ansible/ansible/pull/57188
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/57188
30
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-2.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2019-2.yaml
31
reference_url https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2019/09/msg00016.html
32
reference_url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
33
reference_url https://www.debian.org/security/2021/dsa-4950
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-4950
34
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1717311
reference_id 1717311
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1717311
35
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930065
reference_id 930065
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930065
36
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-10156
reference_id CVE-2019-10156
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-10156
37
reference_url https://access.redhat.com/errata/RHSA-2019:1705
reference_id RHSA-2019:1705
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:1705
38
reference_url https://access.redhat.com/errata/RHSA-2019:1706
reference_id RHSA-2019:1706
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:1706
39
reference_url https://access.redhat.com/errata/RHSA-2019:1707
reference_id RHSA-2019:1707
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:1707
40
reference_url https://access.redhat.com/errata/RHSA-2019:1708
reference_id RHSA-2019:1708
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:1708
fixed_packages
0
url pkg:pypi/ansible@2.6.18
purl pkg:pypi/ansible@2.6.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-52zf-mjec-f3d5
7
vulnerability VCID-5mcc-gtrr-j3e4
8
vulnerability VCID-5r2p-dxtk-pkas
9
vulnerability VCID-6hdk-ywcn-4qe4
10
vulnerability VCID-6smx-ju23-8qes
11
vulnerability VCID-6swz-79ue-bbef
12
vulnerability VCID-95kg-bk3s-g7gx
13
vulnerability VCID-98zq-xddz-dyc8
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-brft-snn6-guc8
18
vulnerability VCID-d8by-xxm3-xkhb
19
vulnerability VCID-enwa-2cfn-5uab
20
vulnerability VCID-gnq4-v5a7-m3ew
21
vulnerability VCID-hyr1-b223-bkef
22
vulnerability VCID-j4px-r23h-9kb7
23
vulnerability VCID-kgjy-7kdy-c3cg
24
vulnerability VCID-m87b-eb5y-8ydf
25
vulnerability VCID-n2b8-e8fa-2ue1
26
vulnerability VCID-nx86-xnct-afbs
27
vulnerability VCID-p6cz-c9ah-c7cp
28
vulnerability VCID-qtt6-8kf8-1fbt
29
vulnerability VCID-rarq-tdjt-hff3
30
vulnerability VCID-rnub-zmb6-5yhw
31
vulnerability VCID-uvca-5e2n-pqew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.18
1
url pkg:pypi/ansible@2.7.12
purl pkg:pypi/ansible@2.7.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-4tfv-snmv-bbax
7
vulnerability VCID-52zf-mjec-f3d5
8
vulnerability VCID-5mcc-gtrr-j3e4
9
vulnerability VCID-5r2p-dxtk-pkas
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-95kg-bk3s-g7gx
14
vulnerability VCID-98zq-xddz-dyc8
15
vulnerability VCID-aq21-sp74-17gk
16
vulnerability VCID-axds-bd49-fbdj
17
vulnerability VCID-b423-t4kx-eqbq
18
vulnerability VCID-b8cv-v25q-1kh3
19
vulnerability VCID-brft-snn6-guc8
20
vulnerability VCID-bvsa-kz7r-zyea
21
vulnerability VCID-d8by-xxm3-xkhb
22
vulnerability VCID-enwa-2cfn-5uab
23
vulnerability VCID-gnq4-v5a7-m3ew
24
vulnerability VCID-hyr1-b223-bkef
25
vulnerability VCID-j4px-r23h-9kb7
26
vulnerability VCID-kgjy-7kdy-c3cg
27
vulnerability VCID-m87b-eb5y-8ydf
28
vulnerability VCID-n2b8-e8fa-2ue1
29
vulnerability VCID-nx86-xnct-afbs
30
vulnerability VCID-p6cz-c9ah-c7cp
31
vulnerability VCID-qtt6-8kf8-1fbt
32
vulnerability VCID-rarq-tdjt-hff3
33
vulnerability VCID-rnub-zmb6-5yhw
34
vulnerability VCID-uvca-5e2n-pqew
35
vulnerability VCID-vctt-ev3n-zkf8
36
vulnerability VCID-xpfd-zdry-euh5
37
vulnerability VCID-zcmk-4k97-kkd9
38
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.12
2
url pkg:pypi/ansible@2.8.2
purl pkg:pypi/ansible@2.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-4tfv-snmv-bbax
7
vulnerability VCID-52zf-mjec-f3d5
8
vulnerability VCID-5mcc-gtrr-j3e4
9
vulnerability VCID-5r2p-dxtk-pkas
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-7d8z-g99x-7qh2
14
vulnerability VCID-95kg-bk3s-g7gx
15
vulnerability VCID-98zq-xddz-dyc8
16
vulnerability VCID-aq21-sp74-17gk
17
vulnerability VCID-axds-bd49-fbdj
18
vulnerability VCID-b423-t4kx-eqbq
19
vulnerability VCID-b8cv-v25q-1kh3
20
vulnerability VCID-brft-snn6-guc8
21
vulnerability VCID-bvsa-kz7r-zyea
22
vulnerability VCID-d8by-xxm3-xkhb
23
vulnerability VCID-enwa-2cfn-5uab
24
vulnerability VCID-gnq4-v5a7-m3ew
25
vulnerability VCID-hyr1-b223-bkef
26
vulnerability VCID-j4px-r23h-9kb7
27
vulnerability VCID-kgjy-7kdy-c3cg
28
vulnerability VCID-m87b-eb5y-8ydf
29
vulnerability VCID-mk3k-n9wn-q3ct
30
vulnerability VCID-n2b8-e8fa-2ue1
31
vulnerability VCID-nx86-xnct-afbs
32
vulnerability VCID-p6cz-c9ah-c7cp
33
vulnerability VCID-qtt6-8kf8-1fbt
34
vulnerability VCID-rarq-tdjt-hff3
35
vulnerability VCID-rnub-zmb6-5yhw
36
vulnerability VCID-sdv2-h8d8-9ydj
37
vulnerability VCID-tfhg-gzz2-7qc5
38
vulnerability VCID-uvca-5e2n-pqew
39
vulnerability VCID-vctt-ev3n-zkf8
40
vulnerability VCID-xpfd-zdry-euh5
41
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.2
aliases CVE-2019-10156, GHSA-grgm-pph5-j5h7, PYSEC-2019-2
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xn7b-vz2e-6qdh
37
url VCID-zcmk-4k97-kkd9
vulnerability_id VCID-zcmk-4k97-kkd9
summary Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.
references
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html
2
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html
3
reference_url https://access.redhat.com/errata/RHSA-2018:3770
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3770
4
reference_url https://access.redhat.com/errata/RHSA-2018:3771
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3771
5
reference_url https://access.redhat.com/errata/RHSA-2018:3772
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3772
6
reference_url https://access.redhat.com/errata/RHSA-2018:3773
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:3773
7
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16859.json
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16859.json
8
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16859
reference_id
reference_type
scores
0
value 0.00091
scoring_system epss
scoring_elements 0.25744
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16859
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16859
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16859
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16859
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16859
11
reference_url https://cwe.mitre.org/data/definitions/200.html
reference_id
reference_type
scores
url https://cwe.mitre.org/data/definitions/200.html
12
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
13
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
14
reference_url https://github.com/ansible/ansible/blob/v2.5.13/changelogs/CHANGELOG-v2.5.rst
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/blob/v2.5.13/changelogs/CHANGELOG-v2.5.rst
15
reference_url https://github.com/ansible/ansible/commit/0d746b4198abf84290a093b83cf02b4203d73d9f
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/0d746b4198abf84290a093b83cf02b4203d73d9f
16
reference_url https://github.com/ansible/ansible/commit/2f8d3fcf41107efafc14d51ab6e14531ca8f8c87
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/2f8d3fcf41107efafc14d51ab6e14531ca8f8c87
17
reference_url https://github.com/ansible/ansible/commit/4d748d34f9392aa469da00a85c8e2d5fe6cec52b
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/4d748d34f9392aa469da00a85c8e2d5fe6cec52b
18
reference_url https://github.com/ansible/ansible/commit/8c1f701e6e9df29fe991f98265e2dd76acca4b8c
reference_id
reference_type
scores
url https://github.com/ansible/ansible/commit/8c1f701e6e9df29fe991f98265e2dd76acca4b8c
19
reference_url https://github.com/ansible/ansible/pull/49142
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/pull/49142
20
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-60.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-60.yaml
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-16859
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-16859
22
reference_url https://web.archive.org/web/20200227102121/http://www.securityfocus.com/bid/106004
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 6.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200227102121/http://www.securityfocus.com/bid/106004
23
reference_url http://www.securityfocus.com/bid/106004
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/106004
24
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1649607
reference_id 1649607
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1649607
fixed_packages
0
url pkg:pypi/ansible@2.5.12
purl pkg:pypi/ansible@2.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-3v1a-j6eq-57dk
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-5mcc-gtrr-j3e4
7
vulnerability VCID-5r2p-dxtk-pkas
8
vulnerability VCID-6hdk-ywcn-4qe4
9
vulnerability VCID-6smx-ju23-8qes
10
vulnerability VCID-6swz-79ue-bbef
11
vulnerability VCID-7f2g-zz9p-sufc
12
vulnerability VCID-95kg-bk3s-g7gx
13
vulnerability VCID-98zq-xddz-dyc8
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-bmq3-uckn-tfhk
18
vulnerability VCID-brft-snn6-guc8
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-n2b8-e8fa-2ue1
27
vulnerability VCID-nx86-xnct-afbs
28
vulnerability VCID-p6cz-c9ah-c7cp
29
vulnerability VCID-qtt6-8kf8-1fbt
30
vulnerability VCID-rarq-tdjt-hff3
31
vulnerability VCID-rnub-zmb6-5yhw
32
vulnerability VCID-uvca-5e2n-pqew
33
vulnerability VCID-xk7s-y611-mffc
34
vulnerability VCID-xn7b-vz2e-6qdh
35
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.12
1
url pkg:pypi/ansible@2.5.13
purl pkg:pypi/ansible@2.5.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-3v1a-j6eq-57dk
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-5mcc-gtrr-j3e4
7
vulnerability VCID-5r2p-dxtk-pkas
8
vulnerability VCID-6hdk-ywcn-4qe4
9
vulnerability VCID-6smx-ju23-8qes
10
vulnerability VCID-6swz-79ue-bbef
11
vulnerability VCID-7f2g-zz9p-sufc
12
vulnerability VCID-95kg-bk3s-g7gx
13
vulnerability VCID-98zq-xddz-dyc8
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-bmq3-uckn-tfhk
18
vulnerability VCID-brft-snn6-guc8
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-n2b8-e8fa-2ue1
27
vulnerability VCID-nx86-xnct-afbs
28
vulnerability VCID-p6cz-c9ah-c7cp
29
vulnerability VCID-qtt6-8kf8-1fbt
30
vulnerability VCID-rarq-tdjt-hff3
31
vulnerability VCID-rnub-zmb6-5yhw
32
vulnerability VCID-uvca-5e2n-pqew
33
vulnerability VCID-xk7s-y611-mffc
34
vulnerability VCID-xn7b-vz2e-6qdh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.5.13
2
url pkg:pypi/ansible@2.6.9
purl pkg:pypi/ansible@2.6.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-3v1a-j6eq-57dk
4
vulnerability VCID-4331-d5yy-uybc
5
vulnerability VCID-46yu-yqv4-1ugb
6
vulnerability VCID-49gh-wgmc-mfew
7
vulnerability VCID-52zf-mjec-f3d5
8
vulnerability VCID-5mcc-gtrr-j3e4
9
vulnerability VCID-5r2p-dxtk-pkas
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-7f2g-zz9p-sufc
14
vulnerability VCID-95kg-bk3s-g7gx
15
vulnerability VCID-98zq-xddz-dyc8
16
vulnerability VCID-axds-bd49-fbdj
17
vulnerability VCID-b423-t4kx-eqbq
18
vulnerability VCID-b8cv-v25q-1kh3
19
vulnerability VCID-bmq3-uckn-tfhk
20
vulnerability VCID-brft-snn6-guc8
21
vulnerability VCID-d8by-xxm3-xkhb
22
vulnerability VCID-enwa-2cfn-5uab
23
vulnerability VCID-gnq4-v5a7-m3ew
24
vulnerability VCID-hyr1-b223-bkef
25
vulnerability VCID-j4px-r23h-9kb7
26
vulnerability VCID-kgjy-7kdy-c3cg
27
vulnerability VCID-m87b-eb5y-8ydf
28
vulnerability VCID-n2b8-e8fa-2ue1
29
vulnerability VCID-nx86-xnct-afbs
30
vulnerability VCID-p6cz-c9ah-c7cp
31
vulnerability VCID-qtt6-8kf8-1fbt
32
vulnerability VCID-rarq-tdjt-hff3
33
vulnerability VCID-rnub-zmb6-5yhw
34
vulnerability VCID-uvca-5e2n-pqew
35
vulnerability VCID-xk7s-y611-mffc
36
vulnerability VCID-xn7b-vz2e-6qdh
37
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.9
3
url pkg:pypi/ansible@2.6.10
purl pkg:pypi/ansible@2.6.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-3v1a-j6eq-57dk
4
vulnerability VCID-4331-d5yy-uybc
5
vulnerability VCID-46yu-yqv4-1ugb
6
vulnerability VCID-49gh-wgmc-mfew
7
vulnerability VCID-52zf-mjec-f3d5
8
vulnerability VCID-5mcc-gtrr-j3e4
9
vulnerability VCID-5r2p-dxtk-pkas
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-7f2g-zz9p-sufc
14
vulnerability VCID-95kg-bk3s-g7gx
15
vulnerability VCID-98zq-xddz-dyc8
16
vulnerability VCID-axds-bd49-fbdj
17
vulnerability VCID-b423-t4kx-eqbq
18
vulnerability VCID-b8cv-v25q-1kh3
19
vulnerability VCID-bmq3-uckn-tfhk
20
vulnerability VCID-brft-snn6-guc8
21
vulnerability VCID-d8by-xxm3-xkhb
22
vulnerability VCID-enwa-2cfn-5uab
23
vulnerability VCID-gnq4-v5a7-m3ew
24
vulnerability VCID-hyr1-b223-bkef
25
vulnerability VCID-j4px-r23h-9kb7
26
vulnerability VCID-kgjy-7kdy-c3cg
27
vulnerability VCID-m87b-eb5y-8ydf
28
vulnerability VCID-n2b8-e8fa-2ue1
29
vulnerability VCID-nx86-xnct-afbs
30
vulnerability VCID-p6cz-c9ah-c7cp
31
vulnerability VCID-qtt6-8kf8-1fbt
32
vulnerability VCID-rarq-tdjt-hff3
33
vulnerability VCID-rnub-zmb6-5yhw
34
vulnerability VCID-uvca-5e2n-pqew
35
vulnerability VCID-xk7s-y611-mffc
36
vulnerability VCID-xn7b-vz2e-6qdh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.6.10
4
url pkg:pypi/ansible@2.7.3
purl pkg:pypi/ansible@2.7.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-3v1a-j6eq-57dk
4
vulnerability VCID-4331-d5yy-uybc
5
vulnerability VCID-46yu-yqv4-1ugb
6
vulnerability VCID-49gh-wgmc-mfew
7
vulnerability VCID-4tfv-snmv-bbax
8
vulnerability VCID-52zf-mjec-f3d5
9
vulnerability VCID-5mcc-gtrr-j3e4
10
vulnerability VCID-5r2p-dxtk-pkas
11
vulnerability VCID-6hdk-ywcn-4qe4
12
vulnerability VCID-6smx-ju23-8qes
13
vulnerability VCID-6swz-79ue-bbef
14
vulnerability VCID-7f2g-zz9p-sufc
15
vulnerability VCID-95kg-bk3s-g7gx
16
vulnerability VCID-98zq-xddz-dyc8
17
vulnerability VCID-aq21-sp74-17gk
18
vulnerability VCID-axds-bd49-fbdj
19
vulnerability VCID-b423-t4kx-eqbq
20
vulnerability VCID-b8cv-v25q-1kh3
21
vulnerability VCID-bmq3-uckn-tfhk
22
vulnerability VCID-brft-snn6-guc8
23
vulnerability VCID-bvsa-kz7r-zyea
24
vulnerability VCID-d8by-xxm3-xkhb
25
vulnerability VCID-enwa-2cfn-5uab
26
vulnerability VCID-gnq4-v5a7-m3ew
27
vulnerability VCID-hyr1-b223-bkef
28
vulnerability VCID-j4px-r23h-9kb7
29
vulnerability VCID-kgjy-7kdy-c3cg
30
vulnerability VCID-m87b-eb5y-8ydf
31
vulnerability VCID-n2b8-e8fa-2ue1
32
vulnerability VCID-nx86-xnct-afbs
33
vulnerability VCID-p6cz-c9ah-c7cp
34
vulnerability VCID-qtt6-8kf8-1fbt
35
vulnerability VCID-rarq-tdjt-hff3
36
vulnerability VCID-rnub-zmb6-5yhw
37
vulnerability VCID-uvca-5e2n-pqew
38
vulnerability VCID-vctt-ev3n-zkf8
39
vulnerability VCID-xk7s-y611-mffc
40
vulnerability VCID-xn7b-vz2e-6qdh
41
vulnerability VCID-xpfd-zdry-euh5
42
vulnerability VCID-zcmk-4k97-kkd9
43
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.3
5
url pkg:pypi/ansible@2.7.4
purl pkg:pypi/ansible@2.7.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-3v1a-j6eq-57dk
4
vulnerability VCID-4331-d5yy-uybc
5
vulnerability VCID-46yu-yqv4-1ugb
6
vulnerability VCID-49gh-wgmc-mfew
7
vulnerability VCID-4tfv-snmv-bbax
8
vulnerability VCID-52zf-mjec-f3d5
9
vulnerability VCID-5mcc-gtrr-j3e4
10
vulnerability VCID-5r2p-dxtk-pkas
11
vulnerability VCID-6hdk-ywcn-4qe4
12
vulnerability VCID-6smx-ju23-8qes
13
vulnerability VCID-6swz-79ue-bbef
14
vulnerability VCID-7f2g-zz9p-sufc
15
vulnerability VCID-95kg-bk3s-g7gx
16
vulnerability VCID-98zq-xddz-dyc8
17
vulnerability VCID-aq21-sp74-17gk
18
vulnerability VCID-axds-bd49-fbdj
19
vulnerability VCID-b423-t4kx-eqbq
20
vulnerability VCID-b8cv-v25q-1kh3
21
vulnerability VCID-bmq3-uckn-tfhk
22
vulnerability VCID-brft-snn6-guc8
23
vulnerability VCID-bvsa-kz7r-zyea
24
vulnerability VCID-d8by-xxm3-xkhb
25
vulnerability VCID-enwa-2cfn-5uab
26
vulnerability VCID-gnq4-v5a7-m3ew
27
vulnerability VCID-hyr1-b223-bkef
28
vulnerability VCID-j4px-r23h-9kb7
29
vulnerability VCID-kgjy-7kdy-c3cg
30
vulnerability VCID-m87b-eb5y-8ydf
31
vulnerability VCID-n2b8-e8fa-2ue1
32
vulnerability VCID-nx86-xnct-afbs
33
vulnerability VCID-p6cz-c9ah-c7cp
34
vulnerability VCID-qtt6-8kf8-1fbt
35
vulnerability VCID-rarq-tdjt-hff3
36
vulnerability VCID-rnub-zmb6-5yhw
37
vulnerability VCID-uvca-5e2n-pqew
38
vulnerability VCID-vctt-ev3n-zkf8
39
vulnerability VCID-xk7s-y611-mffc
40
vulnerability VCID-xn7b-vz2e-6qdh
41
vulnerability VCID-xpfd-zdry-euh5
42
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.7.4
6
url pkg:pypi/ansible@2.8.1
purl pkg:pypi/ansible@2.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-39vn-b7y4-v3ez
2
vulnerability VCID-3jxq-kxnz-6bfh
3
vulnerability VCID-4331-d5yy-uybc
4
vulnerability VCID-46yu-yqv4-1ugb
5
vulnerability VCID-49gh-wgmc-mfew
6
vulnerability VCID-4tfv-snmv-bbax
7
vulnerability VCID-52zf-mjec-f3d5
8
vulnerability VCID-5mcc-gtrr-j3e4
9
vulnerability VCID-5r2p-dxtk-pkas
10
vulnerability VCID-6hdk-ywcn-4qe4
11
vulnerability VCID-6smx-ju23-8qes
12
vulnerability VCID-6swz-79ue-bbef
13
vulnerability VCID-7d8z-g99x-7qh2
14
vulnerability VCID-95kg-bk3s-g7gx
15
vulnerability VCID-98zq-xddz-dyc8
16
vulnerability VCID-aq21-sp74-17gk
17
vulnerability VCID-axds-bd49-fbdj
18
vulnerability VCID-b423-t4kx-eqbq
19
vulnerability VCID-b8cv-v25q-1kh3
20
vulnerability VCID-brft-snn6-guc8
21
vulnerability VCID-bvsa-kz7r-zyea
22
vulnerability VCID-d8by-xxm3-xkhb
23
vulnerability VCID-enwa-2cfn-5uab
24
vulnerability VCID-gnq4-v5a7-m3ew
25
vulnerability VCID-hyr1-b223-bkef
26
vulnerability VCID-j4px-r23h-9kb7
27
vulnerability VCID-kgjy-7kdy-c3cg
28
vulnerability VCID-m87b-eb5y-8ydf
29
vulnerability VCID-mk3k-n9wn-q3ct
30
vulnerability VCID-n2b8-e8fa-2ue1
31
vulnerability VCID-nx86-xnct-afbs
32
vulnerability VCID-p6cz-c9ah-c7cp
33
vulnerability VCID-qtt6-8kf8-1fbt
34
vulnerability VCID-rarq-tdjt-hff3
35
vulnerability VCID-rnub-zmb6-5yhw
36
vulnerability VCID-sdv2-h8d8-9ydj
37
vulnerability VCID-tfhg-gzz2-7qc5
38
vulnerability VCID-uvca-5e2n-pqew
39
vulnerability VCID-vctt-ev3n-zkf8
40
vulnerability VCID-xk7s-y611-mffc
41
vulnerability VCID-xn7b-vz2e-6qdh
42
vulnerability VCID-xpfd-zdry-euh5
43
vulnerability VCID-zjct-yufk-jkdg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.8.1
aliases CVE-2018-16859, GHSA-v735-2pp6-h86r, PYSEC-2018-60
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zcmk-4k97-kkd9
Fixing_vulnerabilities
0
url VCID-664v-ms96-jfd2
vulnerability_id VCID-664v-ms96-jfd2
summary Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.
references
0
reference_url https://access.redhat.com/errata/RHSA-2017:1244
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1244
1
reference_url https://access.redhat.com/errata/RHSA-2017:1334
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1334
2
reference_url https://access.redhat.com/errata/RHSA-2017:1476
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1476
3
reference_url https://access.redhat.com/errata/RHSA-2017:1499
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1499
4
reference_url https://access.redhat.com/errata/RHSA-2017:1599
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1599
5
reference_url https://access.redhat.com/errata/RHSA-2017:2524
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:2524
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7481.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7481.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7481
reference_id
reference_type
scores
0
value 0.04313
scoring_system epss
scoring_elements 0.89067
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7481
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7481
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7481
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://github.com/advisories/GHSA-w578-j992-554x
reference_id
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w578-j992-554x
11
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
12
reference_url https://github.com/ansible/ansible/commit/a1886911fcf4b691130cfc70dfc5daa5e07c46a3
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/a1886911fcf4b691130cfc70dfc5daa5e07c46a3
13
reference_url https://github.com/ansible/ansible/commit/ed56f51f185a1ffd7ea57130d260098686fcc7c2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/ed56f51f185a1ffd7ea57130d260098686fcc7c2
14
reference_url https://github.com/ansible/ansible/commit/f0e348f5eeb70c1fb3127d90891da43b5c0a9d29
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/f0e348f5eeb70c1fb3127d90891da43b5c0a9d29
15
reference_url https://github.com/ansible/ansible/commit/fd30f5328986f9e1da434474481f32bf918a600c
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/fd30f5328986f9e1da434474481f32bf918a600c
16
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-41.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-41.yaml
17
reference_url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/01/msg00023.html
18
reference_url https://usn.ubuntu.com/4072-1
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://usn.ubuntu.com/4072-1
19
reference_url https://usn.ubuntu.com/4072-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4072-1/
20
reference_url https://web.archive.org/web/20170801122609/http://www.securityfocus.com/bid/98492
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20170801122609/http://www.securityfocus.com/bid/98492
21
reference_url http://www.securityfocus.com/bid/98492
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/98492
22
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1450018
reference_id 1450018
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1450018
23
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862666
reference_id 862666
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862666
24
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-7481
reference_id CVE-2017-7481
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-7481
fixed_packages
0
url pkg:pypi/ansible@2.1.6.0
purl pkg:pypi/ansible@2.1.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-46yu-yqv4-1ugb
4
vulnerability VCID-49gh-wgmc-mfew
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-664v-ms96-jfd2
8
vulnerability VCID-6hdk-ywcn-4qe4
9
vulnerability VCID-6smx-ju23-8qes
10
vulnerability VCID-6swz-79ue-bbef
11
vulnerability VCID-7f2g-zz9p-sufc
12
vulnerability VCID-826d-vdw1-dbaj
13
vulnerability VCID-95kg-bk3s-g7gx
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-bmq3-uckn-tfhk
18
vulnerability VCID-brft-snn6-guc8
19
vulnerability VCID-d3nw-dz41-wfg2
20
vulnerability VCID-d8by-xxm3-xkhb
21
vulnerability VCID-enwa-2cfn-5uab
22
vulnerability VCID-gnq4-v5a7-m3ew
23
vulnerability VCID-hyr1-b223-bkef
24
vulnerability VCID-j4px-r23h-9kb7
25
vulnerability VCID-kgjy-7kdy-c3cg
26
vulnerability VCID-m87b-eb5y-8ydf
27
vulnerability VCID-n2b8-e8fa-2ue1
28
vulnerability VCID-nx86-xnct-afbs
29
vulnerability VCID-p6cz-c9ah-c7cp
30
vulnerability VCID-qbws-64b9-83fc
31
vulnerability VCID-qtt6-8kf8-1fbt
32
vulnerability VCID-rarq-tdjt-hff3
33
vulnerability VCID-rgk8-k53p-gkft
34
vulnerability VCID-rnub-zmb6-5yhw
35
vulnerability VCID-s2w1-fedq-ckes
36
vulnerability VCID-uvca-5e2n-pqew
37
vulnerability VCID-vtec-237j-1ua2
38
vulnerability VCID-xk7s-y611-mffc
39
vulnerability VCID-xn7b-vz2e-6qdh
40
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.1.6.0
1
url pkg:pypi/ansible@2.2.3.0
purl pkg:pypi/ansible@2.2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-46yu-yqv4-1ugb
4
vulnerability VCID-49gh-wgmc-mfew
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-664v-ms96-jfd2
8
vulnerability VCID-6hdk-ywcn-4qe4
9
vulnerability VCID-6smx-ju23-8qes
10
vulnerability VCID-6swz-79ue-bbef
11
vulnerability VCID-7f2g-zz9p-sufc
12
vulnerability VCID-826d-vdw1-dbaj
13
vulnerability VCID-95kg-bk3s-g7gx
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-bmq3-uckn-tfhk
18
vulnerability VCID-brft-snn6-guc8
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-n2b8-e8fa-2ue1
27
vulnerability VCID-nx86-xnct-afbs
28
vulnerability VCID-p6cz-c9ah-c7cp
29
vulnerability VCID-qbws-64b9-83fc
30
vulnerability VCID-qtt6-8kf8-1fbt
31
vulnerability VCID-rarq-tdjt-hff3
32
vulnerability VCID-rnub-zmb6-5yhw
33
vulnerability VCID-s2w1-fedq-ckes
34
vulnerability VCID-uvca-5e2n-pqew
35
vulnerability VCID-xk7s-y611-mffc
36
vulnerability VCID-xn7b-vz2e-6qdh
37
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.2.3.0
2
url pkg:pypi/ansible@2.3.1.0
purl pkg:pypi/ansible@2.3.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-46yu-yqv4-1ugb
4
vulnerability VCID-49gh-wgmc-mfew
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-7f2g-zz9p-sufc
11
vulnerability VCID-826d-vdw1-dbaj
12
vulnerability VCID-95kg-bk3s-g7gx
13
vulnerability VCID-a79h-gfcm-13cq
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-bmq3-uckn-tfhk
18
vulnerability VCID-brft-snn6-guc8
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-n2b8-e8fa-2ue1
27
vulnerability VCID-nx86-xnct-afbs
28
vulnerability VCID-p6cz-c9ah-c7cp
29
vulnerability VCID-qbws-64b9-83fc
30
vulnerability VCID-qtt6-8kf8-1fbt
31
vulnerability VCID-rarq-tdjt-hff3
32
vulnerability VCID-rnub-zmb6-5yhw
33
vulnerability VCID-uvca-5e2n-pqew
34
vulnerability VCID-xk7s-y611-mffc
35
vulnerability VCID-xn7b-vz2e-6qdh
36
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.3.1.0
3
url pkg:pypi/ansible@2.4.0.0
purl pkg:pypi/ansible@2.4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-46yu-yqv4-1ugb
4
vulnerability VCID-49gh-wgmc-mfew
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-6hdk-ywcn-4qe4
8
vulnerability VCID-6smx-ju23-8qes
9
vulnerability VCID-6swz-79ue-bbef
10
vulnerability VCID-7f2g-zz9p-sufc
11
vulnerability VCID-826d-vdw1-dbaj
12
vulnerability VCID-95kg-bk3s-g7gx
13
vulnerability VCID-a79h-gfcm-13cq
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-bmq3-uckn-tfhk
18
vulnerability VCID-brft-snn6-guc8
19
vulnerability VCID-ce7n-7xet-pyav
20
vulnerability VCID-d8by-xxm3-xkhb
21
vulnerability VCID-enwa-2cfn-5uab
22
vulnerability VCID-gnq4-v5a7-m3ew
23
vulnerability VCID-hyr1-b223-bkef
24
vulnerability VCID-j4px-r23h-9kb7
25
vulnerability VCID-kgjy-7kdy-c3cg
26
vulnerability VCID-kva6-sjfx-rbe3
27
vulnerability VCID-m87b-eb5y-8ydf
28
vulnerability VCID-n2b8-e8fa-2ue1
29
vulnerability VCID-nx86-xnct-afbs
30
vulnerability VCID-p6cz-c9ah-c7cp
31
vulnerability VCID-qbws-64b9-83fc
32
vulnerability VCID-qtt6-8kf8-1fbt
33
vulnerability VCID-rarq-tdjt-hff3
34
vulnerability VCID-rnub-zmb6-5yhw
35
vulnerability VCID-smbs-h4tr-3qbv
36
vulnerability VCID-uvca-5e2n-pqew
37
vulnerability VCID-xk7s-y611-mffc
38
vulnerability VCID-xn7b-vz2e-6qdh
39
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.4.0.0
aliases CVE-2017-7481, GHSA-w578-j992-554x, PYSEC-2018-41
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-664v-ms96-jfd2
1
url VCID-s2w1-fedq-ckes
vulnerability_id VCID-s2w1-fedq-ckes
summary Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.
references
0
reference_url https://access.redhat.com/errata/RHSA-2017:1244
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1244
1
reference_url https://access.redhat.com/errata/RHSA-2017:1334
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1334
2
reference_url https://access.redhat.com/errata/RHSA-2017:1476
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1476
3
reference_url https://access.redhat.com/errata/RHSA-2017:1499
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1499
4
reference_url https://access.redhat.com/errata/RHSA-2017:1599
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1599
5
reference_url https://access.redhat.com/errata/RHSA-2017:1685
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:1685
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7466.json
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7466.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7466
reference_id
reference_type
scores
0
value 0.02659
scoring_system epss
scoring_elements 0.86041
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7466
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7466
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7466
9
reference_url https://github.com/ansible/ansible
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible
10
reference_url https://github.com/ansible/ansible/commit/0d418789a298561fded9bce977d34babc9097079
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/0d418789a298561fded9bce977d34babc9097079
11
reference_url https://github.com/ansible/ansible/commit/7ff9fa52cfcef2065f0db80d85dd94b9b754839c
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/commit/7ff9fa52cfcef2065f0db80d85dd94b9b754839c
12
reference_url https://github.com/ansible/ansible/issues/24186
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/ansible/ansible/issues/24186
13
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-40.yaml
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-40.yaml
14
reference_url https://web.archive.org/web/20170701161323/http://www.securityfocus.com/bid/97595
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20170701161323/http://www.securityfocus.com/bid/97595
15
reference_url http://www.securityfocus.com/bid/97595
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/97595
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1439212
reference_id 1439212
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1439212
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-7466
reference_id CVE-2017-7466
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-7466
18
reference_url https://github.com/advisories/GHSA-3m8p-xpm6-8ww3
reference_id GHSA-3m8p-xpm6-8ww3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3m8p-xpm6-8ww3
fixed_packages
0
url pkg:pypi/ansible@2.2.3.0
purl pkg:pypi/ansible@2.2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-46yu-yqv4-1ugb
4
vulnerability VCID-49gh-wgmc-mfew
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-664v-ms96-jfd2
8
vulnerability VCID-6hdk-ywcn-4qe4
9
vulnerability VCID-6smx-ju23-8qes
10
vulnerability VCID-6swz-79ue-bbef
11
vulnerability VCID-7f2g-zz9p-sufc
12
vulnerability VCID-826d-vdw1-dbaj
13
vulnerability VCID-95kg-bk3s-g7gx
14
vulnerability VCID-axds-bd49-fbdj
15
vulnerability VCID-b423-t4kx-eqbq
16
vulnerability VCID-b8cv-v25q-1kh3
17
vulnerability VCID-bmq3-uckn-tfhk
18
vulnerability VCID-brft-snn6-guc8
19
vulnerability VCID-d8by-xxm3-xkhb
20
vulnerability VCID-enwa-2cfn-5uab
21
vulnerability VCID-gnq4-v5a7-m3ew
22
vulnerability VCID-hyr1-b223-bkef
23
vulnerability VCID-j4px-r23h-9kb7
24
vulnerability VCID-kgjy-7kdy-c3cg
25
vulnerability VCID-m87b-eb5y-8ydf
26
vulnerability VCID-n2b8-e8fa-2ue1
27
vulnerability VCID-nx86-xnct-afbs
28
vulnerability VCID-p6cz-c9ah-c7cp
29
vulnerability VCID-qbws-64b9-83fc
30
vulnerability VCID-qtt6-8kf8-1fbt
31
vulnerability VCID-rarq-tdjt-hff3
32
vulnerability VCID-rnub-zmb6-5yhw
33
vulnerability VCID-s2w1-fedq-ckes
34
vulnerability VCID-uvca-5e2n-pqew
35
vulnerability VCID-xk7s-y611-mffc
36
vulnerability VCID-xn7b-vz2e-6qdh
37
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.2.3.0
1
url pkg:pypi/ansible@2.3.0.0
purl pkg:pypi/ansible@2.3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-257n-yc2z-hfe8
1
vulnerability VCID-3jxq-kxnz-6bfh
2
vulnerability VCID-4331-d5yy-uybc
3
vulnerability VCID-46yu-yqv4-1ugb
4
vulnerability VCID-49gh-wgmc-mfew
5
vulnerability VCID-5mcc-gtrr-j3e4
6
vulnerability VCID-5r2p-dxtk-pkas
7
vulnerability VCID-664v-ms96-jfd2
8
vulnerability VCID-6hdk-ywcn-4qe4
9
vulnerability VCID-6smx-ju23-8qes
10
vulnerability VCID-6swz-79ue-bbef
11
vulnerability VCID-7f2g-zz9p-sufc
12
vulnerability VCID-826d-vdw1-dbaj
13
vulnerability VCID-95kg-bk3s-g7gx
14
vulnerability VCID-a79h-gfcm-13cq
15
vulnerability VCID-axds-bd49-fbdj
16
vulnerability VCID-b423-t4kx-eqbq
17
vulnerability VCID-b8cv-v25q-1kh3
18
vulnerability VCID-bmq3-uckn-tfhk
19
vulnerability VCID-brft-snn6-guc8
20
vulnerability VCID-d8by-xxm3-xkhb
21
vulnerability VCID-enwa-2cfn-5uab
22
vulnerability VCID-gnq4-v5a7-m3ew
23
vulnerability VCID-hyr1-b223-bkef
24
vulnerability VCID-j4px-r23h-9kb7
25
vulnerability VCID-kgjy-7kdy-c3cg
26
vulnerability VCID-m87b-eb5y-8ydf
27
vulnerability VCID-n2b8-e8fa-2ue1
28
vulnerability VCID-nx86-xnct-afbs
29
vulnerability VCID-p6cz-c9ah-c7cp
30
vulnerability VCID-qbws-64b9-83fc
31
vulnerability VCID-qtt6-8kf8-1fbt
32
vulnerability VCID-rarq-tdjt-hff3
33
vulnerability VCID-rnub-zmb6-5yhw
34
vulnerability VCID-uvca-5e2n-pqew
35
vulnerability VCID-xk7s-y611-mffc
36
vulnerability VCID-xn7b-vz2e-6qdh
37
vulnerability VCID-zcmk-4k97-kkd9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.3.0.0
aliases CVE-2017-7466, GHSA-3m8p-xpm6-8ww3, PYSEC-2018-40
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s2w1-fedq-ckes
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/ansible@2.2.3.0