Fedora: Security Advisory for ansible (FEDORA-2021-0414eb891b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-29441

CVE-2021-29441 affects Nacos before version 1.4.1. The AuthFilter used for enforcing authentication contains a backdoor that lets servers bypass the filter and skip authentication checks; the bypass relies on spoofable User-Agent headers, enabling a user to perform administrative tasks on the Nac...

CVE-2021-29442

Nacos

Missing Authentication for Critical Function

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly...

Moderate: Red Hat Security Advisory: Ansible security update (2.9.20)

An update for ansible is now available for Ansible Engine 2.9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

Moderate: Red Hat Security Advisory: Ansible security update (2.9.20)

An update for ansible is now available for Ansible Engine 2 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

Weak Password Vulnerability in Telecom Gateway Configuration Management Backend at China Telecom Group Corporation Ltd.

Founded in September 2000, China Telecom Group Corporation is a mega state-owned communications enterprise in China and a global partner of the Shanghai World Expo. A weak password vulnerability exists in the configuration management backend of China Telecom Group Corporation's telecom gateway,...

The vulnerability of the rsyslog configuration file in the Ansible configuration management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the rsyslog configuration file in the Ansible configuration management system is related to incorrect default access settings. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the TLS module in configuration management systems and remote execution of Salt operations, related to the improper assignment of permissions for critical resources, allows attackers to gain access to confidential data.

The vulnerability of the TLS module in configuration management systems and remote execution of Salt operations is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to gain access to confidential data...

The vulnerability of the salt-netapi component in the Configuration Management system and remote execution of Salt operations, due to insufficient input data validation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the salt-netapi component in the Configuration Management system and remote Salt execution operations is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and...

The vulnerability of the configuration management system and remote execution of operations, related to the lack of measures to neutralize special elements, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of configuration management systems and remote execution of operations related to Salt is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cau...

Foreman 安全漏洞

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman that arises from improper authorization handling...

Nokia NetAct 18A Filename Change Code Execution Vulnerability

Nokia NetAct 18A is an application system from NOKIA, Finland. It provides best-in-class applications for seamless day-to-day network operations, including configuration management, monitoring and software management. A security vulnerability exists in Nokia NetAct 18A that allows an attacker to...

Foreman 安全漏洞

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides service provisioning, configuration management, and status reporting. Foreman has a security vulnerability that can be exploited by an attacker to emulate foreman-proxy...

CVE-2021-21437

CVE-2021-21437 affects OTRSCIsInCustomerFrontend up to version 7.0.15 and ITSMConfigurationManagement up to 7.0.24. The issue allows agents to see linked Config Items without the required permissions, as defined in General Catalog. This is a data-access problem impacting confidentiality (partial)...

Unspecified Vulnerability in SaltStack Salt (CNVD-2021-15043)

SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack Saltstack. The tool provides configuration management, remote execution, and other features. A security vulnerability exists in SaltStack Salt versions prior to Salt 3002.5, which stems from the fact that eaut...

[SECURITY] Fedora 32 Update: ansible-2.9.18-1.fc32

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

[SECURITY] Fedora 33 Update: ansible-2.9.18-1.fc33

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

Moderate: Red Hat Security Advisory: Ansible security and bug fix update (2.9.18)

An update for ansible is now available for Ansible Engine 2 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

Moderate: Red Hat Security Advisory: Ansible security and bug fix update (2.9.18)

An update for ansible is now available for Ansible Engine 2.9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...