Поиск уязвимостей
Количество 15
Количество 15
ALT-PU-2014-1523
ALT-PU-2014-1523: package `ansible` update to version 1.5.5-alt1
CVE-2014-4658
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
CVE-2014-4658
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
CVE-2014-4658
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file.
CVE-2014-4658
The vault subsystem in Ansible before 1.5.5 does not set the umask bef ...
GHSA-5g4v-2pc6-4hh4
Ansible Sensitive Files Are Locally Readable
CVE-2014-4660
Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by leveraging existence of a file that uses the "deb http://user:pass@server:port/" format.
CVE-2014-4660
Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by leveraging existence of a file that uses the "deb http://user:pass@server:port/" format.
CVE-2014-4660
Ansible before 1.5.5 constructs filenames containing user and password ...
CVE-2014-4659
Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format.
CVE-2014-4659
Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format.
CVE-2014-4659
Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format.
CVE-2014-4659
Ansible before 1.5.5 sets 0644 permissions for sources.list, which mig ...
GHSA-5xm4-jmpw-p6j3
Ansible discloses credential information
GHSA-6667-f46p-pg88
Ansible sets unsafe permissions for sources.list
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2014-1523 ALT-PU-2014-1523: package `ansible` update to version 1.5.5-alt1 | CVSS3: 5.5 | больше 12 лет назад | |
 | CVE-2014-4658 The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file. | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
 | CVE-2014-4658 The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file. | CVSS3: 5.5 | 0% Низкий | больше 12 лет назад |
 | CVE-2014-4658 The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or modification of a vault file, which allows local users to obtain sensitive key information by reading a file. | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| CVE-2014-4658 The vault subsystem in Ansible before 1.5.5 does not set the umask bef ... | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| GHSA-5g4v-2pc6-4hh4 Ansible Sensitive Files Are Locally Readable | CVSS3: 5.5 | 0% Низкий | больше 4 лет назад |
| CVE-2014-4660 Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by leveraging existence of a file that uses the "deb http://user:pass@server:port/" format. | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| CVE-2014-4660 Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by leveraging existence of a file that uses the "deb http://user:pass@server:port/" format. | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| CVE-2014-4660 Ansible before 1.5.5 constructs filenames containing user and password ... | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| CVE-2014-4659 Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format. | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| CVE-2014-4659 Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format. | CVSS3: 5.5 | 0% Низкий | больше 12 лет назад |
| CVE-2014-4659 Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format. | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| CVE-2014-4659 Ansible before 1.5.5 sets 0644 permissions for sources.list, which mig ... | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
| GHSA-5xm4-jmpw-p6j3 Ansible discloses credential information | CVSS3: 5.5 | 0% Низкий | больше 4 лет назад |
| GHSA-6667-f46p-pg88 Ansible sets unsafe permissions for sources.list | CVSS3: 5.5 | 0% Низкий | больше 4 лет назад |
Уязвимостей на страницу