Lucene search
K

8 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/20 1:21 p.m.2 views

CVE-2025-14377

A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext secrets incorrectly stored when a playbook is running. This component has been retired and has been optional since the 1.36 release in 2024...

8.8CVSS5.2AI score0.00031EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/20 1:21 p.m.17 views

CVE-2025-14377 Verve Asset Manager – Plaintext Storage Vulnerabilities

A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext secrets incorrectly stored when a playbook is running. This component has been retired and has been optional since the 1.36 release in 2024...

8.8CVSS0.00031EPSS
Exploits0References1
Veracode
Veracode
added 2025/12/13 7:32 a.m.1 views

Improper Cleanup Of Sensitive Data

Ansible is vulnerable to improper cleanup of sensitive data. The vulnerability is due to the awsssm connection plugin not performing garbage collection after playbook execution, which allows sensitive files to remain in the storage bucket and exposes confidential data to unauthorized access...

5.5CVSS5.8AI score0.0008EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/14 2:15 a.m.14 views

CVE-2024-8775 Ansible-core: exposure of sensitive information in ansible vault files due to improper logging

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

5.5CVSS5.3AI score0.00037EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2024/09/13 9:42 a.m.12 views

CVE-2024-8775

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

5.5CVSS6.2AI score0.00037EPSS
Exploits0References4
GithubExploit
GithubExploit
added 2024/04/04 1:31 p.m.279 views

Exploit for Embedded Malicious Code in Tukaani Xz

ansible-CVE-2024-3094 Ansible playbooks designed to check and...

10CVSS9.8AI score0.85058EPSS
Exploits38
Rockylinux
Rockylinux
added 2023/01/23 2:29 p.m.25 views

rhc-worker-playbook bug fix update

An update is available for rhc-worker-playbook. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rhc-worker-playbook is a Python-based worker for Rocky...

1.5AI score
Exploits0
Rockylinux
Rockylinux
added 2022/11/02 1:56 p.m.20 views

rhc-worker-playbook bug fix and enhancement update

An update is available for rhc-worker-playbook. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rhc-worker-playbook is a Python-based worker for Rocky...

1.3AI score
Exploits0
Rows per page
Query Builder