Ansible Code Injection Vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2014-4678 · ADVISORY
• ansible/ansible commit 5429b85 · WEB
• pypa/advisory-database · WEB
• groups.google.com/forum/message/raw · WEB
• security-tracker.debian.org/tracker/CVE-2014-4678 · WEB
• openwall.com/lists/oss-security/2014/06/26/30 · WEB
• openwall.com/lists/oss-security/2014/07/02/2 · WEB
• rapid7.com/db/vulnerabilities/freebsd-vid-2c493ac8-205e-11e5-a4a5-002590263bf5 · WEB
• rapid7.com/db/vulnerabilities/gentoo-linux-cve-2014-4678 · WEB
• GitHub Advisory GHSA-66c7-5pwv-mm3j · ADVISORY

More vulnerabilities in ansible

• CVE-2025-14010MEDIUM 5.5A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure (IE) of sensitive credentials, …
• CVE-2023-5115MEDIUM 6.3An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role …
• CVE-2022-3697HIGH 7.5A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. Th…
• CVE-2021-20180MEDIUM 5.5A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature w…
• CVE-2021-3620MEDIUM 5.5A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclose…