Improper Cleanup Of Sensitive Data

Ansible is vulnerable to improper cleanup of sensitive data. The vulnerability is due to the awsssm connection plugin not performing garbage collection after playbook execution, which allows sensitive files to remain in the storage bucket and exposes confidential data to unauthorized access...

CVE-2020-25635

CVE-2020-25635 describes a flaw in Ansible Base where using the aws_ssm connection plugin fails to garbage-collect after a playbook run, leaving files in the bucket and potentially exposing data. The issue directly affects data confidentiality. The connected advisories (e.g., GHSA-F556-49JC-4RVC ...

CVE-2020-25636

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

CVE-2020-25636

CVE-2020-25636 : A flaw in Ansible Base when using the aws_ssm connection plugin lacks namespace separation for file transfers, causing files to be written directly to the root bucket and potentially colliding across multiple ansible processes. The impact, as described in the sources, is mainly o...

CVE-2020-25636

A flaw was found in Ansible Base when using the awsssm connection plugin, as there is not a namespace separation for file transfers. Files are written directly to the root bucket, making it possible to have collisions when running multiple Ansible processes. The highest threat from this...

CVE-2020-1753

A security flaw was found in the Ansible Engine when managing Kubernetes using the k8s connection plugin. Sensitive parameters such as passwords and tokens are passed to the kubectl command line instead of using environment variables or an input configuration file, which is safer. This flaw...

OPENSUSE-SU-2019:1858-1 Security update for ansible

This update for ansible fixes the following issues: Ansible was updated to version 2.8.1: Full changelog is at /usr/share/doc/packages/ansible/changelogs/ - Bugfixes - ACI - DO not encode querystring - ACI modules - Fix non-signature authentication - Add missing directory provided via...

Ansible chroot, jail and zone connection plugin backlink vulnerability

Ansible is a computer system configuration manager that can be used to publish, manage, and orchestrate computer systems. chroot, jail, and zone connection are among the plug-ins. chroot is a root directory modification plug-in; jail is a process or application restriction plug-in; and zone...