Lucene search
+L

49 matches found

EUVD
EUVD
added 2026/07/31 12:30 a.m.14 views

EUVD-2026-51314

A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When an operator runs a specific remediation task, this manipulated report can cause the Ansible controller to read its own local files and cop...

6.2CVSS5.7AI score0.00219EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/30 10:16 p.m.10 views

CVE-2026-68563

A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read...

5.5CVSS0.00101EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/30 9:13 p.m.39 views

CVE-2026-68563 Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure of postgresql data via insecure backup permissions

A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read...

5.5CVSS0.00101EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/30 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-68562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When a...

6.2CVSS5.5AI score0.00219EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/30 12:0 a.m.18 views

PT-2026-66614

Name of the Vulnerable Software and Affected Versions ansible-collection-redhat-leapp affected versions not specified Description A flaw exists when a remediation task is executed with elevated privileges and the leapp old postgresql data option is selected. This results in the creation of a...

5.5CVSS5.4AI score0.00101EPSS
SaveExploits0References4
Fedora
Fedora
added 2026/07/17 1:9 a.m.16 views

[SECURITY] Fedora 43 Update: ansible-collection-ansible-posix-2.2.1-1.fc43

Ansible Collection targeting POSIX and POSIX-ish platforms...

7.3CVSS6.1AI score0.00161EPSS
SaveExploits0
Fedora
Fedora
added 2026/07/17 12:54 a.m.18 views

[SECURITY] Fedora 44 Update: ansible-collection-ansible-posix-2.2.1-1.fc44

Ansible Collection targeting POSIX and POSIX-ish platforms...

7.3CVSS6.1AI score0.00161EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/21 12:3 p.m.13 views

Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the cryptography package

Summary Storage Virtualize Ansible Collection uses the cryptography package to provide common cryptographic algorithms. Version cryptography-46.0.5 package is vulnerable to CVE-2026-39892. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected...

9.8CVSS5.8AI score0.00652EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/18 5:24 p.m.27 views

Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the paramiko package

Summary Storage Virtualize Ansible Collection uses the paramiko package to provide common ssh capability. paramiko-4.0.0-py3-none-any.whl is vulnerable to CVE-2026-44405. Vulnerability Details CVEID:CVE-2026-44405 DESCRIPTION: In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1...

3.4CVSS5.8AI score0.00114EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/08 12:0 a.m.7 views

Amazon Linux 2023 : ansible (ALAS2023-2025-1330)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1330 advisory. A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure IE of sensitive credentials, specifically plaintext passwords, via verbose output when runni...

5.5CVSS7.1AI score0.00132EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/12/04 12:31 p.m.7 views

EUVD-2025-201152

A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure IE of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and...

5.5CVSS5.8AI score0.00132EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/04 12:31 p.m.6 views

GHSA-8GGH-XWR9-3373 Ansible Community General Collection is vulnerable to exposure of sensitive information

A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure IE of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and...

5.5CVSS6.2AI score0.00132EPSS
SaveExploits0References7
NVD
NVD
added 2025/12/04 10:16 a.m.10 views

CVE-2025-14010

A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure IE of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and...

5.5CVSS0.00132EPSS
SaveExploits0References5
OSV
OSV
added 2025/12/04 10:16 a.m.2 views

DEBIAN-CVE-2025-14010

A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure IE of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and...

5.5CVSS5.3AI score0.00132EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/04 10:16 a.m.8 views

UBUNTU-CVE-2025-14010

A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure IE of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and...

5.5CVSS5.8AI score0.00132EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/12/04 9:51 a.m.9 views

CVE-2025-14010

A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure IE of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and...

5.5CVSS5.8AI score0.00132EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/04 9:51 a.m.4 views

CVE-2025-14010 Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output

A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure IE of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and...

5.5CVSS6AI score0.00132EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/12/04 9:51 a.m.44 views

CVE-2025-14010 Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output

A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure IE of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and...

5.5CVSS0.00132EPSS
SaveExploits0References5
CVE
CVE
added 2025/12/04 9:51 a.m.31 views

CVE-2025-14010

CVE-2025-14010 affects the Ansible Community General collection, where a flaw in ansible-collection-community-general can cause information exposure of sensitive credentials (plaintext passwords) via verbose output when Ansible runs with debug. This means attackers with access to logs could poten...

5.5CVSS6AI score0.00132EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/12/04 9:51 a.m.7 views

CVE-2025-14010 Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output

A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure IE of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and...

5.5CVSS5.9AI score
SaveExploits0References9
Rows per page
Query Builder