PT-2025-45707 · Pypi · Ansible

Published 2025-10-31 · Updated 2025-10-31

OSV

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

A flaw was found in Ansible Base when using the aws ssm connection plugin as its garbage collector is not happening after the playbook run is completed. Files would remain in the bucket exposing the data. This issue directly affects data confidentiality.

Fix

Weakness Enumeration

CWE-212

Related Identifiers

GHSA-F556-49JC-4RVC

Affected Products

Ansible

References · 7

• https://osv.dev/vulnerability/GHSA-f556-49jc-4rvc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25635 · Security Note
• https://github.com/ansible/ansible · Note
• https://github.com/ansible-collections/community.aws/issues/222 · Note
• https://github.com/ansible-collections/community.aws/pull/237#issuecomment-1468591094 · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-220.yaml · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25635 · Note