Information Disclosure

2020-03-2503:53:55

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

14.2%

JSON

ansible is vulnerable to information disclosure. The Dataloader temporary files are not properly cleaned during the context and threads switching, allowing a local user to access the temporary files and obtain confidential information.

CPENameOperatorVersion
ansiblele2.7.16
ansiblele2.8.10
ansiblele2.9.6
ansibleeq2.6.4__1.el7ae
ansibleeq2.6.2__1.el7
ansibleeq2.2.2.0__1.el7
ansibleeq2.9.6__2.el7
ansibleeq2.6.5__1.el7ae
ansibleeq2.4.4.0__1.el7ae
ansibleeq2.7.0__1.el7ae

Name	Operator	Version
ansible	le	2.7.16
ansible	le	2.8.10
ansible	le	2.9.6
ansible	eq	2.6.4__1.el7ae
ansible	eq	2.6.2__1.el7
ansible	eq	2.2.2.0__1.el7
ansible	eq	2.9.6__2.el7
ansible	eq	2.6.5__1.el7ae
ansible	eq	2.4.4.0__1.el7ae
ansible	eq	2.7.0__1.el7ae