PT-2025-45707 · Pypi · Ansible

Publicado 2025-10-31 · Atualizado 2025-10-31

OSV

CVSS v3.1

5.0

Média

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

A flaw was found in Ansible Base when using the aws ssm connection plugin as its garbage collector is not happening after the playbook run is completed. Files would remain in the bucket exposing the data. This issue directly affects data confidentiality.

Correção

Enumeração de Fraquezas

CWE-212

Identificadores relacionados

GHSA-F556-49JC-4RVC

Produtos afetados

Ansible

Referências · 7

• https://github.com/ansible/ansible · Nota
• https://github.com/ansible-collections/community.aws/issues/222 · Nota
• https://github.com/ansible-collections/community.aws/pull/237#issuecomment-1468591094 · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-220.yaml · Nota
• https://osv.dev/vulnerability/GHSA-f556-49jc-4rvc · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2020-25635 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635 · Nota