Ansible Collection vulnerabilities

2 known vulnerabilities in Ansible Collection from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Red Hat Ansible Automation Platform 2.4 for…: Exposure of Sensitive System Information to an Unauthorized Control Sphere

  CVE-2023-4237Oct 4, 2023Red Hat

  A flaw was found in the Ansible Automation Platform. When creating a new keypair, the ec2_key module prints out the private key directly to the standard output. This flaw allows an attacker to fetch those keys from the log files, compromising the system's conf

• 7.5 High severity

  ansible, ansible community.aws, ansible…: Improper Handling of Parameters

  CVE-2022-3697Oct 28, 2022Ansible, Ansible Community.aws, Ansible Amazon.aws

  A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading t