PT-2020-16143

CVE-2020-25636

·

Published

2020-10-05

·

Updated

2020-10-09

Description by

CVSS 3.1
6.6
Medium
MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Ansible Base (affected versions not specified)
Description A flaw was found in Ansible Base when using the aws ssm connection plugin, as there is no namespace separation for file transfers. Files are written directly to the root bucket, making it possible to have collisions when running multiple Ansible processes. This issue affects mainly the service availability.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
PYSEC-2020-221
Found an issue in the description? Have something to add? Feel free to write us 👾