CVE-2021-3532
Summary
| CVE | CVE-2021-3532 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-06-09 12:15:00 UTC |
|---|
| Updated | 2024-01-15 17:15:00 UTC |
|---|
| Description | A flaw was found in Ansible where the secret information present in async_files are getting disclosed when the user changes the jobdir to a world readable directory. Any secret information in an async status file will be readable by a malicious user on that system. This flaw affects Ansible Tower 3.7 and Ansible Automation Platform 1.2. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| 1956464 – (CVE-2021-3532) CVE-2021-3532 ansible: async_file sensitive information disclosure |
MISC |
bugzilla.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 691111 Free Berkeley Software Distribution (FreeBSD) Security Update for py (f418cd50-561a-49a2-a133-965d03ede72a)
