GHSA-M429-FHMV-C6Q2 Improper Verification of Cryptographic Signature in ansible

🗓️ 20 Apr 2021 16:44:07Reported by GoogleType

osv🔗 osv.dev👁 29 Views

Flaw in Ansible Engine leads to improper cryptographic signature verificatio

Reporter	Title	Published	Views	Family All 71
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Ansible affect IBM Cloud Pak for Multicloud Management Hybrid GRC	11 May 202119:15	–	ibm
Tenable Nessus	Amazon Linux 2 : ansible (ALASANSIBLE2-2023-005)	27 Sep 202300:00	–	nessus
Tenable Nessus	Debian DSA-4950-1 : ansible - security update	7 Aug 202100:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.8.15) (Important) (RHSA-2020:3600)	1 Sep 202000:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.9.13) (Important) (RHSA-2020:3601)	1 Sep 202000:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Ansible security update (2.9.13) (Important) (RHSA-2020:3602)	1 Sep 202000:00	–	nessus
Tenable Nessus	SUSE SLES15: POS_Image-Graphical7 / POS_Image-JeOS7 / ansible / ansible-doc / etc (SUSE-SU-2024:1509-1)	7 May 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-14365	8 Aug 202500:00	–	nessus
Amazon	Important: ansible	25 Sep 202300:00	–	amazon
AlpineLinux	CVE-2020-14365	23 Sep 202012:25	–	alpinelinux

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-14365
github	www.github.com/ansible/ansible/commit/1d043e082b3b1f3ad35c803137f5d3bcbae92275
github	www.github.com/ansible/ansible/commit/1fa2d5fd6b768120b76a77929e27302b06accc0c
github	www.github.com/ansible/ansible/commit/9bea33ffa3be3d64827f59882d95b817cfab9b7e
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/advisories/GHSA-m429-fhmv-c6q2
github	www.github.com/ansible/ansible
github	www.github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-209.yaml
debian	www.debian.org/security/2021/dsa-4950

27 Nov 2024 05:25Current

7High risk

Vulners AI Score7

CVSS 46.9

CVSS 3.17.1

EPSS0.00233

ansible cryptographic signature