PatchFirst · Latest vulnerabilities
Vulnerability published for ansible-core in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 22
A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.
A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions to modify the account settings of the superuser account and also remove the superuser privileges.
Check your installed stack and versions against the current vulnerability feeds.