CVE-2019-14904

CVE-2019-14904 affects the Ansible Community solaris_zone module. When setting the zone name on a Solaris host, the zone name is checked by listing processes with the bare ps command on the remote host, enabling an attacker to craft the zone name and execute arbitrary commands on the remote syste...

CVE-2019-14864

The connected documents confirm CVE-2019-14864 affects Ansible, specifically versions 2.9.x before 2.9.1, 2.8.x before 2.8.7, and 2.7.x before 2.7.15. The root cause is that the no_log flag is not respected when Sumologic and Splunk callback plugins are used to send task results to collectors, le...

CVE-2019-10206

CVE-2019-10206 affects Ansible (various branches): 2.6.x pre-2.6.19, 2.7.x pre-2.7.13, 2.8.x pre-2.8.4. The flaw arises when prompting passwords by expanding templates, which could reveal passwords via templates/logs. Impact per sources includes potential exposure of credentials (confidentiality)...

CVE-2019-3828

CVE-2019-3828 affects the Ansible fetch module. The vulnerability exists in affected releases where the fetch module does not restrict absolute paths, enabling path traversal to copy or overwrite files outside the designated destination on the local Ansible controller host. Affected versions are ...

CVE-2018-16876

CVE-2018-16876 affects Ansible prior to versions 2.5.14, 2.6.11, and 2.7.5, exposing information via information disclosure in vvv+ mode when no_log is enabled. The issue is a data leakage vulnerability, confirmed across multiple advisories (e.g., RHSA-2019-0564/0590 and related distributions) an...

CVE-2020-1739

CVE-2020-1739 affects Ansible (2.7.16 and earlier, 2.8.8 and earlier, 2.9.5 and earlier). The flaw arises when a password is supplied to the svn module via the password argument, causing the password to be echoed into the svn command line and readable by other users on the same node by inspecting...

CVE-2024-0690

CVE-2024-0690 affects ansible-core and describes an information disclosure where output can leak sensitive data when ANSIBLE_NO_LOG is ignored in certain tasks (e.g., loop items). The vulnerability is evidenced across multiple sources in the connected set, including Red Hat/Debian/AlmaLinux advis...

CVE-2022-3697

CVE-2022-3697 affects the Ansible amazon.aws collection (amazon.aws.ec2_instance module) where tower_callback is handled insecurely, allowing password leakage into logs. Multiple connected sources (Debian/Ubuntu advisories, IBM/Cloud Pak bulletins) confirm the flaw and provide remediation paths: ...

CVE-2019-10217

CVE-2019-10217 concerns Ansible: in 2.8.0–before 2.8.4, GCP module fields handling sensitive data were not correctly marked no_log due to service_account_contents() not setting no_log, potentially leaking secrets in outputs. Connected advisories note the issue being fixed in openSUSE/OpenSUSE bac...

CVE-2020-1733

The CVE-2020-1733 entry concerns a race-condition in Ansible Engine when using become_user: Ansible creates the temporary directory in /var/tmp with umask 77 during module execution, and the operation can succeed even if the directory already exists and is owned by another user. An attacker could...

CVE-2021-20180

CVE-2021-20180 is an Ansible local-authenticated vulnerability where credentials are disclosed in the console log when using the bitbucket_pipeline_variable module, enabling an attacker to steal bitbucket_pipeline credentials and impacting confidentiality. CVSS: v3.1 base 5.5 (local, low complexi...

CVE-2019-14856

CVE-2019-14856 affects Ansible; connected updates show that openSUSE/SUSE patches (ansible 2.9.6 in openSUSE-2020-513 and 2.9.6 in SUSE-2020-0523) fix this and related CVEs by addressing an incomplete fix for CVE-2019-10206 and other issues (e.g., passwords in prompts/log leakage). The issue orig...

CVE-2020-1735

CVE-2020-1735 is a vulnerability in the Ansible Engine where the fetch module can be intercepted, enabling an attacker to inject a new path and choose a different destination path on the controller. The issue affects all 2.7.x, 2.8.x and 2.9.x branches. Connected advisories confirm multiple vendo...

CVE-2021-20191

CVE-2021-20191 affects Ansible and its modules by disclosing credentials (secrets) in console logs when no_log is not applied; the issue is tied to the ansible nxos module in the Cisco context and is reflected in multiple advisories. Affected versions are prior to 2.9.18 (e.g., Ansible 2.9.x line...

CVE-2020-1740

CVE-2020-1740 is about Ansible Engine Vault editing: on the same host, ansible-vault edit can expose old/new secrets due to mkstemp/two-step write. Connected documents consistently confirm this vulnerability across multiple distributions (Astra Linux, Debian, Fedora/Red Hat, Alpine, Amazon Linux)...

CVE-2019-10156

CVE-2019-10156 affects Ansible: templating flaw in versions before 2.6.18, 2.7.12 and 2.8.2 enables information disclosure through unintended variable substitution (contents of any variable may be disclosed). Several connected advisories confirm fixes/upgrades: e.g., Debian stable (buster) update...

CVE-2021-20178

CVE-2021-20178 affects the Ansible SNMP facts/credential-handling path, disclosing credentials in logs when using the snmp_facts feature and related modules such as bitbucket_pipeline_variable. Connected advisories confirm multiple vendors (Debian, Amazon Linux ALAS, Astra Linux, Red Hat/GHSA) re...

CVE-2020-10684

Ansible Engine vulnerable scope: versions 2.7.x before 2.7.17, 2.8.x before 2.8.11, and 2.9.x before 2.9.7 allow an attacker to alter ansible_facts when inject is enabled, potentially leading to privilege escalation or code injection. Connected advisories confirm the same underlying issue and pro...

CVE-2021-3447

CVE-2021-3447 describes a vulnerability in several ansible modules where credentials and secrets logged in plain text on managed nodes or controller when verbose mode is used, not protected by no_log. Affected: Red Hat Ansible Automation Platform <1.2.2; Ansible Tower

CVE-2020-10744

CVE-2020-10744 concerns a race condition in Ansible where an insecure temporary directory is created during become_user, enabling potential takeover of the become user. Connected documents confirm affected versions (Ansible Engine 2.7.18, 2.8.12, 2.9.9; Ansible Tower 3.4.5/3.5.6/3.6.4) and descri...

CVE-2016-9587

CVE-2016-9587 affects Ansible up to versions 2.1.4 and 2.2.1. The issue is improper input validation in handling data from client systems, allowing an attacker who controls a managed client and can send facts back to the server to execute arbitrary code on the Ansible server with server privilege...

CVE-2023-5764

CVE-2023-5764 describes a template-injection flaw in Ansible where the controller’s internal templating can drop the unsafe designation from template data, enabling a crafted file to inject templates during templating data provisioning. This affects Ansible’s templating operations and could allow...

CVE-2017-7466

CVE-2017-7466 is a vulnerability in Ansible prior to version 2.3, where input validation of data returned by client systems could be exploited by a compromised client to execute arbitrary code on the Ansible server with the server’s privileges. Public sources in the provided documents reference R...

CVE-2020-1736

CVE-2020-1736 concerns Ansible Engine where moving a file with atomic_move cannot set the destination file mode. If the destination does not exist, the move can render the new file world-readable; if the file exists, permissions may be loosened before the move, potentially exposing sensitive data...

CVE-2016-3096

CVE-2016-3096 affects the Ansible lxc_container module: the create_script function allows a local user to write arbitrary files or gain privileges via a symlink attack targeting (1) /opt/.lxc-attach-script, (2) the archived container in archive_path, or (3) lxc-attach-script.log, (4) lxc-attach-s...

CVE-2015-3908

CVE-2015-3908 affects Ansible before 1.9.2, where TLS certificate hostname verification against CN/subjectAltName was not performed, enabling MITM with arbitrary valid certificates. Public disclosures and vendor advisories (e.g., Ubuntu USN-7330-1, Debian DLA-1923-1, openSUSE/SUSE advisories, and...

CVE-2020-1738

CVE-2020-1738 affects Ansible Engine. Root cause: when the module package or service is used and the parameter 'use' is omitted, an attacker with local access can influence which module is sent via the ansible facts file if a prior task ran under a malicious user. Affected: all versions in the 2....

CVE-2014-4678

The CVE-2014-4678 entry concerns Ansible’s safe_eval function. Version pre-1.6.4 fails to properly restrict the code subset, enabling remote attackers to execute arbitrary code via crafted instructions. This vulnerability is linked to an incomplete fix for CVE-2014-4657 and is described as a remo...

CVE-2017-7550

CVE-2017-7550 affects Ansible 2.3.x before 2.3.3 and 2.4.x before 2.4.1, where the jenkins_plugin module could reveal sensitive data via parameters passed in its logs. Root cause: passwords could be specified in the params argument, exposing them through remote host logs. Mitigation: the issue wa...

CVE-2016-8614

CVE-2016-8614 affects Ansible before version 2.2.0, where the apt_key module does not properly verify key fingerprints. This allows a remote attacker to create an OpenPGP key that matches a short key ID and inject it in place of the legitimate key. The vulnerability is described consistently acro...

CVE-2016-8628

Concrete details found: CVE-2016-8628 affects Ansible prior to 2.2.0, where unsanitized controller fact variables can let an attacker run arbitrary commands on Ansible clients as the Ansible user. The connected SUSE advisory confirms policy fixes via upgrade paths (e.g., to Ansible 2.9.x series) ...

CVE-2014-4660

CVE-2014-4660 affects Ansible before 1.5.5. The issue arises because the build of filenames uses user and password fields from sources.list (deb http://user:pass@server:port/), which can let a local user disclose sensitive credentials through the presence of such a filename. The connected advisor...

CVE-2013-2233

This CVE concerns Ansible prior to 1.2.1, where failure to cache SSH host keys enables remote attackers to perform man-in-the-middle attacks by intercepting or altering SSH communications. The vulnerability stems from inadequate host-key caching, making the SSH trust posture for managed hosts vul...

CVE-2015-6240

CVE-2015-6240 concerns Ansible, where the chroot, jail, and zone connection plugins allow a local attacker to escape a restricted environment via a symlink attack. Affected software is Ansible versions older than 1.9.2, as described in multiple sources (including GHSA and Debian/Ubuntu advisories...

CVE-2013-4260

CVE-2013-4260 affects Ansible 1.2.x prior to 1.2.3. The vulnerability resides in lib/ansible/playbook/init .py, where, if a playbook run fails, a local user can exploit a symlink attack on a retry file with a predictable name in /var/tmp/ansible/ to overwrite arbitrary files. The issue is rooted ...

CVE-2020-25636

CVE-2020-25636 : A flaw in Ansible Base when using the aws_ssm connection plugin lacks namespace separation for file transfers, causing files to be written directly to the root bucket and potentially colliding across multiple ansible processes. The impact, as described in the sources, is mainly o...

CVE-2020-25635

CVE-2020-25635 describes a flaw in Ansible Base where using the aws_ssm connection plugin fails to garbage-collect after a playbook run, leaving files in the bucket and potentially exposing data. The issue directly affects data confidentiality. The connected advisories (e.g., GHSA-F556-49JC-4RVC ...

CVE-2014-4967

CVE-2014-4967 affects Ansible up to version 1.6.7, enabling remote code execution via crafted facts (trailing src=, temp=, or validate= clauses). Root cause: argument injection in facts processed by Ansible. Impact: remote code execution with code or shell commands executed on the managed host. R...

CVE-2014-4657

The CVE-2014-4657 entry concerns Ansible’s safe_eval, where the code subset is not properly restricted. Connected documents confirm the flaw affects Ansible versions prior to 1.5.4 (the primary reference) and note that subsequent advisories describe an incomplete fix, with some sources indicating...

CVE-2014-4658

Summary: CVE-2014-4658 affects the Ansible vault subsystem and is caused by not setting the umask before creating or modifying a vault file, allowing local users to read sensitive key information. The issue is confirmed in Ansible releases prior to 1.5.5. What’s affected: vault file handling in A...

CVE-2013-4259

CVE-2013-4259 affects Ansible prior to 1.2.3. The vulnerability lies in runner/connection_plugins/ssh.py when ControlPersist is used: a local attacker can redirect an SSH session via a symlink attack on a socket file with a predictable name in /tmp. This is a local-privilege-assignment style issu...

CVE-2014-4966

CVE-2014-4966 affects Ansible before 1.6.7: it allows remote code execution via crafted inventory data or remote data that contain Jinja2 substrings (e.g., lookup('pipe')). The root cause is inadequate sanitization of {{ and lookup substrings in inventory/remote data, enabling arbitrary code exec...

CVE-2014-2686

Technical details about CVE-2014-2686 are not publicly provided in the connected documents. Monitor for updates.

CVE-2014-4659

CVE-2014-4659 affects Ansible before 1.5.5, where sources.list may be created with 0644 permissions. This could allow local users to read credential information embedded in apt sources (e.g., a file formatted as deb http://user:pass@server:port/). The connected documents confirm the vulnerability...

CVE-2014-3498

CVE-2014-3498 affects the Ansible user module prior to 1.6.6. The vulnerability allows remote authenticated users to execute arbitrary commands by passing unfiltered content into variables, which may be processed via Jinja2 template rendering, potentially leading to arbitrary code execution on th...