Lucene search
K

68 matches found

Tenable Nessus
Tenable Nessus
added 2025/11/18 12:0 a.m.1 views

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2025:21706)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:21706 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers ca...

7.5CVSS5.6AI score0.00028EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-0003

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.0007EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-0005

Malicious code in bioql PyPI...

6.3CVSS6.8AI score0.00128EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-0004

Malicious code in bioql PyPI...

6.6CVSS6.8AI score0.00133EPSS
Exploits0References10
OSV
OSV
added 2024/09/16 7:16 a.m.13 views

RHSA-2022:0474 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.0 ansible-runner security update

Bulletin has no description...

8.8CVSS8.6AI score0.00118EPSS
Exploits0References7
OSV
OSV
added 2024/09/16 7:16 a.m.9 views

RHSA-2022:0460 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.1 ansible-runner security update

Bulletin has no description...

8.8CVSS8.6AI score0.00118EPSS
Exploits0References7
OSV
OSV
added 2024/09/16 7:0 a.m.11 views

RHSA-2022:0108 Red Hat Security Advisory: ansible-runner security and bug fix update

Bulletin has no description...

7.3CVSS7.6AI score0.0007EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2024/04/28 12:0 a.m.16 views

RHEL 8 : ansible-runner (RHSA-2022:0108)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0108 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...

7.8CVSS7.6AI score0.0007EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/04/02 7:34 p.m.76 views

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.5CVSS6.9AI score0.93527EPSS
Exploits21References13
RedHat Linux
RedHat Linux
added 2023/09/18 6:16 p.m.40 views

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.5CVSS6.8AI score0.00406EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/07/05 8:55 p.m.24 views

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected by multiple vulnerabilities Ansibel Runner.

Summary Potential multiple vulnerabilities in Ansibel Runner has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2021-3701 DESCRIPTION: Ansible Runner could allow a local authenticated...

7.8CVSS7.9AI score0.00228EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/17 11:28 p.m.39 views

Security Bulletin: Watson AI Gateway for Cloud Pak for Data is vulnerable to Ansible Runner code execution and could allow a local authenticated attacker to execute arbitrary code on the system, caused by improper shell escaping of the shell command.

Summary Ansible Runner could allow a local authenticated attacker to execute arbitrary code on the system, caused by improper shell escaping of the shell command. CVE-2021-4041 See further details below. Vulnerability Details CVEID:CVE-2021-4041 DESCRIPTION: Ansible Runner could allow a local...

7.8CVSS7.9AI score0.0007EPSS
Exploits0Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:48 a.m.1 views

SUSE CVE-2021-3701

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate use...

6.6CVSS6.4AI score0.00133EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:48 a.m.1 views

SUSE CVE-2021-4041

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansiblerunner.interface.runcommand, can lead to parameters getting executed as host's shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual...

7.8CVSS7.6AI score0.0007EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/08/25 12:0 a.m.21 views

ansible-runner vulnerable to shell command injection

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansiblerunner.interface.runcommand, can lead to parameters getting executed as host's shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual...

7.8CVSS7.5AI score0.0007EPSS
Exploits0References6Affected Software1
vulnersOsv
vulnersOsv
added 2022/08/25 12:0 a.m.2 views

ansible-navigator (>=0.6.2 <=1.0.0b1), matrixctl (>=0.8.0 <=0.10.3) +3 more potentially affected by CVE-2021-4041 via ansible-runner (>=1.4.6 <=2.0.0.0a5)

ansible-runner PYPI version =1.4.6, =0.6.2, =0.8.0, =0.0.1, =0.0.11, =0.5.7 Source cves: CVE-2021-4041 Source advisory: OSV:GHSA-6J58-GRHV-2769...

7.8CVSS7.1AI score0.0007EPSS
Exploits0
OSV
OSV
added 2022/08/25 12:0 a.m.25 views

GHSA-6J58-GRHV-2769 ansible-runner vulnerable to shell command injection

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansiblerunner.interface.runcommand, can lead to parameters getting executed as host's shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual...

8.5CVSS7.5AI score0.0007EPSS
Exploits0References7
OSV
OSV
added 2022/08/24 4:15 p.m.14 views

CVE-2021-4041

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansiblerunner.interface.runcommand, can lead to parameters getting executed as host's shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual...

7.8CVSS7.5AI score0.0007EPSS
Exploits0References3
OSV
OSV
added 2022/08/24 4:15 p.m.1 views

DEBIAN-CVE-2021-4041

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansiblerunner.interface.runcommand, can lead to parameters getting executed as host's shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual...

7.8CVSS7.5AI score0.0007EPSS
Exploits0References1
OSV
OSV
added 2022/08/24 4:15 p.m.1 views

UBUNTU-CVE-2021-4041

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansiblerunner.interface.runcommand, can lead to parameters getting executed as host's shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual...

7.8CVSS7.3AI score0.0007EPSS
Exploits0References3
Rows per page
Query Builder