4 matches found
CVE-2021-3532
A flaw was found in Ansible. Confidential information is disclosed in asyncfiles when the user changes the jobdir to a world-readable directory. Any confidential information in an async status file will be readable by a malicious user on that system...
CVE-2021-3532
Removed by vendor...
PT-2021-28360
Name of the Vulnerable Software and Affected Versions: Ansible Tower version 3.7 Ansible Automation Platform version 1.2 Description: A flaw in Ansible discloses secret information in async files when the jobdir is changed to a world-readable directory. This allows a malicious user to read any...
Red Hat Ansible 信息泄露漏洞
Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to distribute, manage, and organize computer systems. An information disclosure vulnerability exists in Red Hat Ansible. When a user changes the jobdir to a world-readable...