CVE-2025-14010

🗓️ 04 Dec 2025 09:51:55Reported by Debian Security Bug TrackerType

debiancve

debiancve🔗 security-tracker.debian.org👁 10 Views

CVE-2025-14010 is a flaw in the Ansible collection community.general.

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses os/exec 1.24.3; 1.24.4, ansible-9.4.0, github.com/eclipse/paho.mqtt.golang v1.3.5 and archive/tar 1.24.2; 1.24.4 which is vulnerable to CVE-2025-47906,CVE-2025-14010,CVE-2025-10543 and CVE-2025-58183	10 Mar 202608:18	–	ibm
Tenable Nessus	Amazon Linux 2023 : ansible (ALAS2023-2025-1330)	8 Jan 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Ansible PHSA-2026-5.0-0855	17 Jun 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Ansible PHSA-2026-5.0-91-0855	10 Aug 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-14010	4 Dec 202500:00	–	nessus
Amazon	Important: ansible	7 Jan 202600:00	–	amazon
Circl	CVE-2025-14010	4 Dec 202510:29	–	circl
CNNVD	Community General Collection 安全漏洞	4 Dec 202500:00	–	cnnvd
CVE	CVE-2025-14010	4 Dec 202509:51	–	cve
Cvelist	CVE-2025-14010 Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output	4 Dec 202509:51	–	cvelist

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	13	all	ansible	12.0.0+dfsg-0+deb13u1	ansible_12.0.0+dfsg-0+deb13u1_all.deb
Debian	14	all	ansible	12.2.0+dfsg-1	ansible_12.2.0+dfsg-1_all.deb
Debian	999	all	ansible	12.2.0+dfsg-1	ansible_12.2.0+dfsg-1_all.deb

04 Dec 2025 09:51Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.5

EPSS0.00132

SSVC

CVE-2025-14010 ansible community.general