Known vulnerabilities in ansible (Alpine package)

Vendor: Alpine Linux Development Team
Software: ansible (Alpine package)
Software CPE: cpe:2.3:o:alpine:ansible_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 28
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ansible (Alpine package) ansible (Alpine package) is affected by 28 known vulnerabilities: 4 high, 7 medium, 17 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47274 - Improper Verification of Cryptographic Signature
CVE-2020-14365		 CWE-347 Low
No
No
 2.9.13-r0 23.09.2020 SB2020092344
SB2020100222
SB2020102019
and 12 more
#VU47114 - Improper input validation
CVE-2020-14330		 CWE-20 Low
No
No
 2.9.13-r0 11.09.2020 SB2020092608
SB2020102017
SB2021080804
and 8 more
#VU47115 - Information Exposure Through Log Files
CVE-2020-14332		 CWE-532 Low
No
No
 2.9.13-r0 11.09.2020 SB2020092609
SB2020102018
SB2021080804
and 7 more
#VU29566 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1746		 CWE-200 Low
No
No
 2.7.17-r0 07.07.2020 SB2020051276
SB2020041765
SB2021080804
and 9 more
#VU29564 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1739		 CWE-200 Low
No
No
 2.7.17-r0 07.07.2020 SB2020031237
SB2020031723
SB2021080804
and 12 more
#VU29028 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1740		 CWE-200 Low
No
No
 2.7.17-r0 15.06.2020 SB2020032420
SB2020061518
SB2020041764
and 12 more
#VU29026 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-1737		 CWE-22 Low
No
No
 2.7.17-r0 15.06.2020 SB2020032420
SB2020061518
SB2020031722
and 12 more
#VU29023 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-1733		 CWE-362 Low
No
No
 2.7.17-r0 15.06.2020 SB2020032420
SB2020061518
SB2020041763
and 10 more
#VU27558 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-10691		 CWE-22 Medium
No
No
 2.9.7-r0 06.05.2020 SB2020050603
SB2020041766
SB2020042252
and 6 more
#VU23450 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-14905		 CWE-78 Low
No
No
 2.7.16-r0, 2.8.8-r0 08.12.2019 SB2019120801
SB2020041628
SB2020041306
and 5 more
#VU23449 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-14904		 CWE-78 Medium
No
No
 2.7.16-r0, 2.8.8-r0 08.12.2019 SB2019120801
SB2020041628
SB2020041306
and 8 more
#VU30577 - Improper input validation
CVE-2019-14856		 CWE-20 Medium
No
No
 2.6.20-r0 26.11.2019 SB2019112625
SB2020041628
SB2020041306
and 4 more
#VU30582 - Exposure of sensitive information to an unauthorized actor
CVE-2019-10217		 CWE-200 Medium
No
No
 2.8.4-r0 25.11.2019 SB2019112223
SB2020072802
SB2020041628
and 6 more
#VU30585 - Improper input validation
CVE-2019-10206		 CWE-20 Medium
No
No
 2.4.6.0-r1 22.11.2019 SB2019112223
SB2020072802
SB2020041628
and 14 more
#VU22872 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14864		 CWE-200 Low
No
No
 2.7.16-r0, 2.8.8-r0 20.11.2019 SB2019112014
SB2020041628
SB2020041306
and 2 more
#VU33375 - Information Exposure Through Log Files
CVE-2019-14858		 CWE-532 Low
No
No
 2.6.20-r0 14.10.2019 SB2020041628
SB2020041306
SB2019102433
and 1 more
#VU21766 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-3828		 CWE-22 High
No
No
 2.5.15-r0 14.10.2019 SB2019032710
SB2019081432
SB2019062713
and 13 more
#VU33354 - Information Exposure Through Log Files
CVE-2019-14846		 CWE-532 Low
No
No
 2.6.20-r0 08.10.2019 SB2020041628
SB2020041306
SB2019102430
and 3 more
#VU16312 - Exposure of sensitive information to an unauthorized actor
CVE-2018-16859		 CWE-200 Low
No
No
 - 05.12.2018 SB2018120610
SB2019022302
SB2019081432
and 8 more
#VU15721 - Exposure of sensitive information to an unauthorized actor
CVE-2018-16837		 CWE-200 Low
No
No
 2.5.15-r0 05.11.2018 SB2018110510
SB2019081432
SB2019062713
and 4 more


Showing elements 1 - 20 out of 28