Medium: ansible

🗓️ 18 Mar 2021 01:13:00Reported by AmazonType

a flaw in ansible module discloses credentials, allowing attackers to steal them. Highest threat is data confidentiality (CVE-2021-20178, CVE-2021-20180, CVE-2021-20191

Reporter	Title	Published	Views	Family All 146
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Ansible bundled with IBM Spectrum Fusion HCI	29 Sep 202222:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Multicloud Management Security Services	26 Mar 202503:34	–	ibm
Tenable Nessus	Amazon Linux 2 : ansible (ALAS-2021-1613)	19 Mar 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ansible (ALASANSIBLE2-2023-004)	27 Sep 202300:00	–	nessus
Tenable Nessus	Fedora 32 : ansible (2021-9a0903469c)	2 Mar 202100:00	–	nessus
Tenable Nessus	Fedora 33 : ansible (2021-e9478617ae)	2 Mar 202100:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : ansible (openSUSE-SU-2022:0081-1)	17 Mar 202200:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.9.18) (Moderate) (RHSA-2021:0663)	24 Feb 202100:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.9.18) (Moderate) (RHSA-2021:0664)	24 Feb 202100:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Amazon Linux	2	noarch	ansible	2.9.18-1.amzn2	ansible-2.9.18-1.amzn2.noarch.rpm
Amazon Linux	2	noarch	ansible-doc	2.9.18-1.amzn2	ansible-doc-2.9.18-1.amzn2.noarch.rpm

19 Mar 2021 22:35Current

5.7Medium risk

Vulners AI Score5.7

CVSS 22.1

CVSS 3.15.5

EPSS0.00038