DeutschShown in its original language — a full translation is planned for a future version.
Ansible: Schwachstelle ermöglicht Offenlegung von Informationen
view advisory published 2021-06-07
Ein lokaler Angreifer kann eine Schwachstelle in Ansible ausnutzen, um Informationen offenzulegen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-10729US | medium5.5OT elevated | — | ||
A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for t… | ||||
02
references
External citations — patches, advisories, analysis.
- Ansible Issue #34144 vom 2021-06-07external
- openSUSE Security Update OPENSUSE-SU-2024:14536-1 vom 2024-12-03external
- openSUSE Security Update OPENSUSE-SU-2025:15753-1 vom 2025-11-22external
- openSUSE Security Update OPENSUSE-SU-2026:10944-1 vom 2026-06-07external
- NVD NIST CVE-2020-10729 vom 2021-06-07external
- Ubuntu Security Notice USN-7330-1 vom 2025-03-06external
- Ubuntu Security Notice USN-7330-2 vom 2025-03-28external
- WID-SEC-W-2024-3588 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan