PT-2020-16142

CVE-2020-25635

·

تاريخ النشر

2020-10-05

·

تاريخ التحديث

2025-11-04

الوصف من

CVSS 3.1
5.5
متوسطة
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Ansible Base (affected versions not specified)
Description A flaw was found in Ansible Base when using the aws ssm connection plugin. The issue arises because the garbage collector does not run after a playbook run is completed, resulting in files remaining in the bucket and exposing data. This directly affects data confidentiality.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-F556-49JC-4RVC
PYSEC-2020-220
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾