FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

py-ansible -- data leak vulnerability

Affected packages
py310-ansible <= 7.1.0
py311-ansible <= 7.1.0
py37-ansible <= 7.1.0
py38-ansible <= 7.1.0
py39-ansible <= 7.1.0


VuXML ID f418cd50-561a-49a2-a133-965d03ede72a
Discovery 2021-06-09
Entry 2023-04-10

Tapas jena reports:

A flaw was found in Ansible where the secret information present in async_files are getting disclosed when the user changes the jobdir to a world readable directory.

Any secret information in an async status file will be readable by a malicious user on that system.

This flaw affects Ansible Tower 3.7 and Ansible Automation Platform 1.2.


CVE Name CVE-2021-3532