Ansible Community General Collection is vulnerable to exposure of sensitive information

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-14010 · ADVISORY
• ansible-collections/community.general · WEB
• ansible-collections/community.general commit 08e56bb · WEB
• access.redhat.com/security/cve/CVE-2025-14010 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• ansible-collections/community.general · PACKAGE
• ansible-community/ansible-build-data · WEB
• ansible-collections/community.general#11005
• ansible-community/ansible-build-data
• pypi.org/project/ansible · PACKAGE
• GitHub Advisory GHSA-8ggh-xwr9-3373 · ADVISORY

ansible のその他の脆弱性

• CVE-2023-5115中 6.3An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role …
• CVE-2022-3697高 7.5A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. Th…
• CVE-2021-20180中 5.5A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature w…
• CVE-2021-3620中 5.5A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclose…
• CVE-2021-3583高 7.1A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the t…