Search for packages
| purl | pkg:alpm/archlinux/ansible@4.0.0-1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-wvuy-s63y-aaan
Aliases: CVE-2021-3532 PYSEC-2021-125 |
A flaw was found in Ansible where the secret information present in async_files are getting disclosed when the user changes the jobdir to a world readable directory. Any secret information in an async status file will be readable by a malicious user on that system. This flaw affects Ansible Tower 3.7 and Ansible Automation Platform 1.2. | There are no reported fixed by versions. |
|
VCID-yuxd-4zd7-aaab
Aliases: CVE-2021-3533 PYSEC-2021-126 |
A flaw was found in Ansible if an ansible user sets ANSIBLE_ASYNC_DIR to a subdirectory of a world writable directory. When this occurs, there is a race condition on the managed machine. A malicious, non-privileged account on the remote machine can exploit the race condition to access the async result data. This flaw affects Ansible Tower 3.7 and Ansible Automation Platform 1.2. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T07:46:33.911283+00:00 | Arch Linux Importer | Affected by | VCID-wvuy-s63y-aaan | https://security.archlinux.org/AVG-2056 | 36.0.0 |
| 2025-03-28T07:46:33.898761+00:00 | Arch Linux Importer | Affected by | VCID-yuxd-4zd7-aaab | https://security.archlinux.org/AVG-2056 | 36.0.0 |
| 2024-09-18T02:01:52.463683+00:00 | Arch Linux Importer | Affected by | VCID-wvuy-s63y-aaan | https://security.archlinux.org/AVG-2056 | 34.0.1 |
| 2024-09-18T02:01:52.443068+00:00 | Arch Linux Importer | Affected by | VCID-yuxd-4zd7-aaab | https://security.archlinux.org/AVG-2056 | 34.0.1 |
| 2024-01-03T22:27:57.086699+00:00 | Arch Linux Importer | Affected by | VCID-wvuy-s63y-aaan | https://security.archlinux.org/AVG-2056 | 34.0.0rc1 |
| 2024-01-03T22:27:57.072133+00:00 | Arch Linux Importer | Affected by | VCID-yuxd-4zd7-aaab | https://security.archlinux.org/AVG-2056 | 34.0.0rc1 |