CVE-2020-1740

2 advisories.

PyPI/ansible CVE-2020-1740: medium 4.7

Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible

Action: Upgrade ansible to 2.7.17 or later.

pip install ansible==2.7.17

pip install ansible==2.8.11

pip install ansible==2.9.7

Affected

introduced	fixed	last affected
0	2.7.17	-
2.8.0a1	2.8.11	-
2.9.0a1	2.9.7	-

Fixed versions

2.7.17

2.8.11

2.9.7

Sources

CVE-2020-1740 · published 2021-04-07T21:47:31Z · modified 2024-09-04T20:45:53.108507Z · JSON

PyPI/ansible CVE-2020-1740: unknown

A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and new secret, a

Action: Upgrade ansible to 2.7.17 or later.

pip install ansible==2.7.17

pip install ansible==2.8.9

pip install ansible==2.9.6

Affected

introduced	fixed	last affected
0	2.7.17	-
2.8.0	2.8.9	-
2.9.0	2.9.6	-

Fixed versions

2.7.17

2.8.9

2.9.6

Sources

CVE-2020-1740 · published 2020-03-16T16:15:00Z · modified 2023-11-08T04:02:41.272964Z · JSON