Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-10729
5.5
MEDIUMCVSS v3
Published
May 27, 2021
CVSS v2
2.1 LOW
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords are exposed at once for the file. This flaw affects Ansible Engine versions before 2.9.6.
ansible/ansible
GitHubAnsible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.
GitHubAnsible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.< 2.9.6NVD
